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(54) MOBILE MANAGEMENT SYSTEM 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide a variety of re- 
mote radio accesses to an end user by dividing mobil- 
ity management to categories of four connection hand- 
over consisting local, micro, macro and global to mini- 
mize update of hand-off accordingly. 

SOLUTION: First a data frame is communicated be- 
tween a 1st mobile end system ES1 and a 1st access 
hub AH1, then when the 1st mobile end system ES1 
is moved and makes registration again through a 2nd 
access point AP2, a registration request is sent to the 
1st access hub from the 1st mobile end system ES1 



through the 2nd access point. The 1st mobile end sys- 
tem ES1 is registered again to the 1 st access hub with- 
out notice of a 1st registration server. Then the 2nd 
access point is linked with the 1st access hub and the 
link between the 1st access point and the 1st access 
hub is interrupted. 
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lifter T . ^yxf-A 
: »-*>BIW--^ H-tm~or^-l:^^ y 

/nM /|/xy h y^f AA^ hu f Sl^— ^ T ? -fe.X;iM y F 
£iltT»S£*ufci:§. fluiBIS-^A^xy Fy 

WN'fciBftrrSi k%< . SS8L ; Miais-^r^-fe 

frlB^^W/Uxy F'yxTA#'MfB3IZ.O 

y f £«ne»— r^-feX'NT'fcy y? 

I^Z^ty'i-;W\ 1»iE!S337?-fe.* 
*4 y bififflffi—<nT9-b*t\7*\izv vtztitz k 

A. 

[H*IM2] fluie**/ h7-^'7*-yv*7 F7 
T-y*7y-A£g?-<^>NM;Uxy FyxfAfclg- . 

mmt omx-mm lx& <o ■, *-a* ? f 

.x htfUOO* ;l/X y h y Xt-A7^3SH07 7 -fc 

fc t S . tiff BSClco^ n'W /Px y F y x f A £ MIB®- 
eog&^-At;:. MIB^-A^li^-^'^iitt-ri. i i: 
SglitL ; MIBH-^Sii^-^'*^^^^ 

OtA^f ;ny F yx^A#'iifrfE^307y*'fe;^N7'£ 

jitTsa«$*ifefcs, itriB^Hcor^-fex^y'^ 
LTmfffim-w-f y^-y-^y^«ffii: yvmr 
t^^^L ; mzm-ei&m-'W* 
jL-;P5r-&^ s i^i^tya-M, B-riemz^r 
friBSS-^-f y ? -7-* yymmt a* y 

y ? $ ft.ftf££ . M f Bid <3 r ? -fe*^ 7 izft L x mil 
mcr>T9-tx;\yl8£v : m~k'm=<F>4 yf—v—^y 



4 >?-y-*>ymm*-kfr. mi7*-v y^-y f 

y-?lZM%MT-?7l<—l»£%E.<WU /t-xy F 
y^fAt WiEffiZtfW y?-7-*y?m&&MtX 

m®m<o4 y?-v-* y^mm t <m?mm lt & 

0. *-A^-y F7-^{i^{iT-^7'l/-ASrBUlB 
y^-y-^yi/negtm-^jifi^-^tcT) 
^•camLrtJO ; BuiB^-Aaii^^^-co^y' 

A-tUiif^ Zcr>m-cr>fJzL->V-hK fl'J^xx 
F^'Buie^HiT)^^ ;l/xy F yxxAfr£>l?0O7? 
-t y F , mmco r ? -fe \ 7 •*> i «1MW 

F^XrA SrfriB*-A^Hf-y\'^ N H?fBmH^-f y 

yyw^kmm-<mmr-^k<rm<r> d 

lulfiaiiu ;x^ f^cobuIB^z:^^ y^-<7 
-^y^^^mHcT)^ y^-v-^y^mm^com. 

IBf5Z(7) ; e>' , NWyi'xy f y x f- a ^'1? IBISH <7)T ^ -fe x 

-*y?Mmt l zttLxmi'mE.c?)4 yt-v-^yym 
mk v y?^hzk L ; mii*-^m$y--;<tf 

*\ friBUH^-f y?-y-*yymmmtmm<n4 
yf-y-^yfmmk v yrztitzmz. MiBm0<7) 
y^-v-^y^Ufgc^LTfriamzco-f y^-7 

-*ywmt<m<r> x )y? torn** z t zi%3rr& 

umm4] mB7*-ijy*-vby-7tfWi-cD7 
*-vy*ybv-7kM&zti. z<7)m—<7)7*-v 
y^y by-ftfZbizmE.M yf-v-^yywm 
; m~<?)7*-v y*-y hv-?tfm—<ng$&j- 

WN\ MZ.<7)T7-tX^7lo±ZfmiXC0'i y?-7-* 
•y F"7— y" ti**J«T - ^7l/-A ^^H^^y \'^f ;UX 

^-tco^f y ^-y-^r yymmk nmx-mm. lx& d . 

7h-A^>y h7-?ttflkatir— *7P— A£!M:tf>>f 

y ^ - v - * y y'Hig k mzcoiifi^-^ s- 1 omx mm 
LTfcD ; HiriB*-A*-y b7-?tfz ^zmwco^is 

F^'HulB^HiOt^W ;ny HyXf A^ibllOT^ 

-^zmtx*-i»mi-?-<>vz%:mztitzkz , una 

H0<7)t AW iHy F y^xASr MIB^-ASilif-ys; 
fc» HulB^-b^^y^-v-^yy'ti^^Mlfi^-coffl 

SEa^-> to ^zms.^ y'i -/u^^ . ; corns. 

cr>^Jx.-)VbK mslffrBft&U ;Uxy F yXfAi* 
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mffiS.cr>T?*X^7'$:Mtxn%BZh*ztZ . flu 

y^-y-^y^fcy^ytiifcfcfl^L; flyfE*- 

A^t^A-yp**, flufEl?/^ y^-«7-^y^«ffi 
A^iem-t^-^ y7-7-*y7$itEfc u y7£ft*:f£ 

Z. t ; 4: -T&fS 3<0i/^r A. 

Z&fr ; SSZ#>7 *-U y*y hy-^*«35ZOfi»9- 

yrmmz-sx- ■. fluiE*-A*>y h7-^*»s4>t»t 

£|gA^y?-7-*y7m£-^ BufEBIS-07 
^£ffitTflulEltl-t;?M y^-V-^y^mmtcofS 

mmv-'*b coffixmm ix *> <o ■, auie*- a^- 

AA^^EcOT^-feX^ y K flufE3l3L<7)T7-lr7y\ 

rt>cti>'flJriB^-oai^-A^3i tt fluis*- a«» 

XrAS:MIS*-Aai|i-9--yN*i:SSIit ; fflE^-A 

WES^jL-/k6«, flulBHEH^^AW /Pxy F yXfAtf 
flu1EmS^T7*7y\7£MtTBSfJ^ft^<h^ if 

>t-7-*y?ffi£t oy-r-r&zkzm^i ■, mm 

omKey^Jz.-iiifi. flufE3?A<7M yf-v-^yy 
m&izw LxmMm-<vmm vy?tvy?-thz.b* 

-v-*y?m^zttLXmt^rjtmm--><t<rm 

wjyrzmm-t&ztzm^L ■, mii^-^m^- 
m&SRJW y9-v-*y?m&ffmtB£K 

<?)A yf-v-^-yymmt oy?ztitimz. mm 
-tcr>j y?-v-*yymmm\^xmimR<nA y? 
-<7-*yrMmtcomcr> >j y? iwrntz z t i m& 



fltriam-^^ y y^mmt <orsxmm lx ±> 

0 ; *-A*-y h>7-?#*-ASflWwCS:-£* ; fly 
/Ux y H vXx A M-<r>T7 yhteXt/m 

-<QT7*A;\7&mtxmt?M~<7)mfrr-JVz%m 

ZtifzbZ. fflSH-cotAW^xyFyXxA^flulE 

H— ;uxy H yxxA^flulE^~c7)r 
T'SriltTSSff Ztitzb Z . mm-<0T7-bA;\7 
iztttx m!Eg£-<7M y^-v-Jf y?mmt u y^-r 
§ i L ; flfriem-^SiJ-tf-^ W§ ^>(cmHco 

^r^-fc^A7**nifliE^-^)>f y^-v-^-y^istgi: 

U y^ftftflHC, frlE^-^Ty'-b^^ytWLTflu 

iEB-<7)-f yt-y-^yymmtcoffiwj ytzwm 

y^n^^^ ; fl«iE*-A^.y w-tifz^zmm 
<?>A yf-v-^yym.i&Z'kfr. fluIE^*- v y*v 
h y-^^Mtir-^ 7 ls-A£m~cr)^;^ ;uxy 

FyxrAtfluism~^)-f yf-v-z-y^mmzmt 

X huIESf50<M y y ^'IStgi: 60P B 1-CMff LT 
±50, flyfE*-A*,y Y7-9\iWmf-?7\/-±»* 

fltria^H^^ yf-v-^yym&tm-nmmy--^ 

kcomxmmtXtS'O ; flulE^-Aailitf-ys^B-O 

xx h^ffiEIS'O^NM^xy Fyxf-A*>^m~c7) 
T^-bX^-^yh. flufSHHc7)Ty'-b7./N7"fcJ:lXmflE 

m-crmmv--^mtxmB^-^m^-^z^m 

ZtitztZ. flulfiUZOt/NM^xyFyT.rASr. flu 
IE*-AS#i-»f-ys^ N flirtEJ&EH<7My?-7-Jfy;/ 

zt%<. nsmt. fluiEm-^^^A-^tifluisaii 
u 7x7 h ^mtiw,-^ y?-v-*yymmfrt> 

flu!EJ?537M yf-v-^yrMm^^Z^i-mm 

izmmt ■, mifr-^miiv-swz^izm—cD^iSjL 

-i ;uxy K yXxA^flulB^H^r 7-fe7M7'$-a 
Sa»Six^ k § , flulE^Ho-f y 7-7-^ y^DSffi 
^*fLTfl<ifESIE3<?)-f y7- I 7-^y7'^fgt l> y7~T 
&Zk Zm^r L ; flulE^-ASIi-if-y W§ 6 t^HO 
^v'i-^Sr^. iWlH^ya-M, AufElfSH 

<?>A y9-v-*yrm&fimt3m<r>4 y?-v-* 
y^mmt u y?%tdzmz, flulEH-^-f y7-v- 
df- y 7«tc^ LTflufEmHcO'f y y 
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H*ii6«^XrA. 

[fifSif 8 ] m$iy *- 'J y* y bv—riffi-n? 
y*«y h!7-?tf$<i>fc:3535WM y^-^-^y^fg 

; ISZC7)7 * - 'J y * -y h 7-? »Ztf>fi» 

^y^»ffi**» ; i§?fB*-A*.y 

-tc^M y^-v-^f yrmmzis*; mmm-^y *- 

\j Y7—7 tfMWt?— ^7l/-A^ ggHO^ n* 
ilftLTfc'A MIS*-A^<y h y-? tester 

mmv-rtt offlxmm tx a o ; firfB*-As#§h/-- 
s» umb ^Mie^Hcox y h ^xta^ t>% 

HuiemH^^sw^xyKvXxA^ 

rffl&t mm~(mm^-^t comco u y? s-ejerr 

§2$E.ery&W iv^y Y Afr'HufBISEOT 
>v7£iitTSS8£*ifci:§. iiyiBIIAcM y?-7 

-^y^"iaig(cW LTffiem-b^-f y^-v-^fy^n 

U y^-TI. i fc L ; HofBtf-ASffh/WN'tf 

a*, mia^cow y^-v-^y^jg^Mian-tio-f 

yf-v-^yrmmizttLx-mzm-tnj y?-v 
-*y?®m.tv>m<n v y? imrtz - 1 *f&rth 

y*y hv-fWZbtzmz.V'i y?-y-*yy®m 
; m~coy *- >j y * -y h ?-? imrj&am- 

-A\ ^0cOT^-feXy>7'feJ;{/^<7)^y^-V-^ 

&w%)\<»Ay*-v-*yymm:is7i-. ifrtem- 

^7t-'jy^7 hv-^ti^{iT-^7ix-A$:^ 
EOTA'^/ny K^xr-AtMia^jEo^ y?-7- 

*y?mm£mtxmmb*:(7M yf-v-^-yymm 
tcr>fflX'mmLxt3<o. MiB*-A^-y hv-ramti} 
u7-?7u-A$:mmm-k<7)j y?-v-*y-ymm 
tf^-comm^r-^tcrimxmmLxti'o ■, mib*-a 

xyKvAf A^nnc^T^-teX-IM yh, lulB^H 



oyr^^x)\zr, tikVmim~<r>mkv-rt*nt,x 

Mtfi*-A^ltir-yN'£gfi$tt*;i:#, IwlBSfSH?)*: 
y /ny h y^xA &MIB*- AS^-/-<Stc|fS8 
L ; mB^-^m^-^W^h^mE.^'J^-Jl-t: 
I(0g5Oty'a-M\ HtflB^HW^yS-f^x 

y vy xt j±miizmm<7)T7±z;\7'$:m. txnmi 

ZtitibZ , MfBlfSA^ y?-y-*y?mmzttL 
xmiemywj yf-v-^yrmtb u y?t&zb 

£*^L ; BulB*-AS$|-9--yW$^fc^A(y)^Vi 

-y-*y?mmi l zttixmi?M-<Dmmy--^b u y 

7-th Lb Zm^L ; MB*-Al»-ys>'£ <t>^ 
-fc^^A-^Sr^, ^^m-t^t^'i-yW, MIB 
3?-b<yM y^-v-^y^iitg^^LTHtFffim~c7)3ifi 

-0w ^ collfO I) y ^ SrflJBrt 4 - 1 L ; Mlfi* 
-Agi^-y W3 A> t^AcT)^ y'a-;^^, 
^A^yv-^*\ mmmAcoj y7-7-*yym 
mtfms&&7\<04 y7-7-*y7mmb V yfZtitz 

mz. mmmi:^ yf-v-^yymmiztttxmi 

W,%.cr)4 y?-y-* y^mmb comwj y7*wm 
h Z b S:tlHH-!> - b *mWib^Z>m?mi ©y^f 
A„ 

[m*^i o] jifiyxrAT'ft-oT : 7*-yy* 

•y hy-^^-cOg^-^N', ^— <r>T7*.X>\7& 
Xlfm-bm-M yj-V-^ysfm&k-k?*- : d^- 

-v-^yrmmz&fr. mm7 y*> y h?-? 

«**JliT - * 7 A O^y )VX. y Y y^f 

AfcMiBm-^-f y?-y-*y^«ftg£atTMfBJ£ 
E.cojyf-v-^yT'mmbvmx'mmLx&r). m 

IB*-A^ >y h V-7\imN,i.T-77 V- A^ HtflfiSS 

HtO-f y^-7-^y^<8flgfcMIBII-<7)jlfi-9--^'i: 

^ h* { mlB^— )Vx.y H y^fA*> ^>|g— or 
^-fex^yh. m-or^-trxyNy. fcitA'H— OS 

HulBlg-O^AW^xyKyxxASrltrlB^-AS 

fne®z^>f y7-7-*y7mmbmm 

SSiiU HalBm-o : &y'i-;l-^\ MffiSli'J ^xx 

<f>a y?-7-*y?'W^\<?)$&e.£9ik-?mM£im 

it*-. Zcr>W.—<7)± : J A-)VbK mlBH— WU>l<x. 
y Y^7T^mUm-(^T7 ^xj\7im tTSa» 

ztitibz . mm-<n4 yf-v-^yrmmizttL 
xffi§d&=cr>4 y?-7-*yyiffi&b v t 

C^^ty'a-;^', huIBH~co-< y 
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f-y-^yfmffitfmmE.nj y9-v-*y9m 
mt v yfztuzmz* wim-oj y9-v-*yy 

mm, 1 1 ] mm? * - u y* >y h v-vim-*) 

y*- , jy*vhy-9tM.%Zti. ffiiE®— 07*- 
'Jy*7 h7-?#S4>tJ&E<?M y^-^-^y^flS 

'J^7 Y T ?-9\i.mMirf-9yv- Aj^tK 
;lx y h y^fA t firiESHtfM vJ-V-^vfW. 

m^m^xmimr^A y ?m&t<mx 
7U-A*wiE^A<o^ y^-y-^y^fiffigtm-*) 

— , £& 'J^xxb fill Z. (7)^ A'^HyKi/ 

Aeifr^w N'tc^it $ fife i: § , fluiem ~ <0*y ypx 

y F y^fA £ frfB^-Ag^-y N't , fflfimA-f y 

v y ^sagfc fne» - <^i»s^-^ <op B i<o u 
ytzmmrhz. fc*< , wan l ; 

-^T^-k^N7'£iltTWa$i$nfe^#. BflTiami 

«m vf-v-*yrmmzi$Lxm&js<r>4 y?- 
v-* y^mmt nmo u y?*vmt& z t zm<$ 

-*y^«tg*WBS&7s<M y^-v-^y^fgi; >; 

y?s*ifc»te, mm>n<r>4y9~-v-*y?wmz 

MLXfflgSlfonJ y?-7-*y^mb<wa?)Vy 
[fS^JS i 2 ] mM?*~ U y* >y h v-9-iffi-n 

; m~<7>7*-y y*-y hy-^^Z^Sil 

*y^*8g£#* •, fuiE*-A*.y tin 
AfcitflBttMy^-y-^y^fig***. Mfam 

-<07 * - U y * y h V- 9 ItmUtT ~ ?7V-J±* 

&~cnvU)\/^yY^XTi±tm?Mm<r)4y?-v 

-*yymm*mtxmw&tt4 y?-v-*yym 

tgfc<olsrcjIfiLTfc 9 . WEtf-A* «y h 7-7(ig 



mcot a/* £& U 7 h #i§iff B3? s*-f 

yUxyh'^xxAj&^nzcor^-fex^ y K mic?) 

7*7**^7*. fcir/Bnoafi^-A^a txmnz* 

-ASi|-9--y\*(cgfi$fifei: & , MfBISZcO^ AW ^ 
xyKv-XrA^Mie^-Aaii^-y^cSaiiL ; ff 

I^HlWtya- )Vif. HulB^Zlco^ys'-f ;L-xyKy 

i: § , MienE^'f y^-y-^f y^nmcitLTiWE 
-^yrmmizttixmEm-cvmiEV-^t u y^-r 

SZ i: Srfg^-L ; fflE*-At»t-^8 MzM-tco 

<o-fy^-7-=Jfy^«ffiK«LTs MIBm~Ojlfi^ 
-y <t cOPbIco u y?£Qffit& Z t L ; ftffe*- 

A«ty A -;W, iiuIEIil-b^H y^-v-^f-y^ffi 
* { Mia^3L<7)-f y^-v-Jf yfmmt o yf^titzm 
flyiBHA^^ y^-y-^y^w^trmrfBm 
Hco-f y^-v-df y^istltcoiaoi; y; *«®rrs 

ii:S:*&^-r4ii:S:*fjafc^*III*«l OOWf 

A„ 

t-v-^yymm:^?* •, m-^y^-v y*v h7 

~co 4 yf-v-^yymmz&n- ; *-A^. y hy- 
^ ^-ASii-tf-y n'^ ii/^H^o^ y * - 7- df- y/ 
MiB^-^^-uy^-y hV-^(ifi^J 
(if - 9 7 y- A Zm-W U /PxyKy^fAhl 

tam-w-f yf-v-^yfMmzmtxmzmE.w 
y9-v-*yym.mtcofflX'mmLx& Y ) , huie*- 

A^-y h7-7(iW4f'-^7y-A£|!)IBmHC0-f 

y ^-v-^f y Tin fc ffiem-oMft^-vs'i: eo^-c 
iiflLTfcO ; mflE^-Aai^-yW^-^^i- 
;<OSH)t^*-/W« t fi'J^xxhfr' 

*'-fyK m§zm-cr>77-txs\y\ t3£xfmsss~<n 

s#i^--^'t. Buie^Hco-f y9- i 7-^y^mmtm 

ieH-Oilfi^-A'i: <7)f H ^ yy^ Sr^Jirt S i fc =5: 

< , ssul ; fria*-ASi*ty--yw§^^-^cE: 

ya-i^M, >H fiO^~tfOt y jl— yp^", ItilEIg— <o 
^&ysw ;ny H yXT-A^Mie^— COT _xy\7£jl 
tTSai*$nfe>#. MBIIZco-f y^-7-Jf-y^' 
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-*v?wmt y y?ztitim^ mim=co4 v?- 
mmt c7)W\co v>? £tj}ujrr § * t ^fg^-r & ^ t 

immn 1 4 ] ilffyxxA-C&^T : H-<07 
•J y^.y h7-^*^-OSIi^-AfeJ;VB-OW y 

- 7 tm~com^-j m-?>T7-txj\7'}5£Tsm 

-<th y 7-7-3- y7'^£#^ ; *-A*-y h7- 

^y/if^t^^ Mien— o 7*— y y*>y hv-7 
iijgWir-77 y-A£S-<W"W /yxy h'yxf 

A^Buis^-cT)^ y7-v-*y7iif££jitTfjies 

15*- A ^ y F7-7fiS^t2x-77y-A£MBJil 
y7-7-*y7itfi£tffies-o®fiif-A^ 
^UTiifiLTfcD ; frie^-Aa^-A^s-^ 

7. htffiieS— tfO^^ ;Pxy h yx^Afr^S— cor 
^•bWyh, Ii!jies-c077-fe7/s7fcctt/iiyies 

fufci: £ , files— eo^A-r ^xy H^Xf-ASrMB* 

-AsuHr-AtsaitL : fjie*-Aa#jhf-A#$ 

rt\ fflBlg-^AW;uxy KyXxAfr'ffteS-OT* 

?*zjsy*mtxn%mztifct% . fjiastacM y 

7-7-* y^m&izMlxmm-^ y?-v-* 
yymmt y y^-rs z t hh&l ■, m%z*-j»an& 

-t W S to lzm=<7)*: is a -/U & . £ 1: y* 

msmmcoj yt-v-^yrwmzttvx 
mm-<m<m-^b y y7-r&.r t zm^t mm 
fr-Asmv—JWZ ^izmm^^j^.-^^. z 
<mm^ ; J^--)vti\ mM&mcoj yf-v-^y? 
ffifctfm§s&--<7)imv--^t y y 9 ztuzb # . mrte 
t&EjD'i y?-y-*y?mmi,zMLxm§m-(?>Mm 
v-^t corsco y y ^ ^flwr-r* ; t l ; frie* 

^tilOTy'i-;^^, ,rco 

»S«tya-;Wi«. fiieSEHo-f y^-v-df y7H 
tgfr'fjieszcM y^-«7-dr y^ntgi: y y? ztitz 
mz, fjiesH^M y9-7-*y9&mz*iixmiz 
w.-(?>a ys-^-^yymmt corncob >9t>vmt 

h Z b Zm^-fh Z i: if" -SffiflyXxA. 

tut^ 1 5 ] s-ow?--^ m-tmz.cr>T? 

-fe7.*M yh&£lfm~<r)T9->e.X)\?'Z^ts* v hV 
-7rtTffl^.g>S— WW /PxyKyx-rAhfjISH 
-cDT7-<r77N7',>: c7)r H lO«i!^^y Hsf 



y s-f )VJuy Y yXfA 4; fifes— COT 9 -fe7.*-f y h £ 

oi txmmm-coT9 ^^yt cornxmrn-t sxf -y 

7° ; fjieil-cotAWyUxyFyxTA^ijt. file 
SZOT7-tr^*-f y h tTHSfi-f & 4: # . ^fl 
y ^xt. h ?r files— co^U)Ux.y Kyxx^*^fj 

amz. cot 9 •feT.*^ y h ^ji t Tfjf es— -t x 
^7-^jifi-r h ztX\ ffies-o^y ;i^x y h yx 
TASrfjien-^r^-fex/N^c fjies-^siii?-- 

'MzW®r?hZ.btc< s 1.7.^ ^7° ; filets 

;kxy F y7xA^fjfeH~c7)T 9 -b7.*-f y h ^31 

frtem~c7)r7-b7*-f yh^ 

fiies-T7-bx^7t=y y?t^Xf77 ; fcil/ff 

fesnor^-fex^ y h#"frfem-o7*7 t^A7t 

y y 9 Ztitz b § . mUm-cOT 9 -fe7*M y h £ file 
S-^r 7 -tr7y\7<7)rBl60 y y 7 ^Krf -S. Xf -y 7°^ 

[ff^Jll 6 ] frie^ y hV-7^'7^--y y^ y h 
r 7-9bftfcZtl. Z<D7*-Vy*-/h7-9tfZb 

i,zm-b&=cDT9-tx^y'ti£tfm-'cr ) -l y9-v- 

^yrmwtis*- ; *-A^-y vv-9-h^-^wkyr 

O^E v s-f ypx y H yXfA i; S~ COT 7 -tex; N7" 

2rjitTfiies-o-< y9- r 7-^y9mmbcorsxm 

;ny H y^fA* s fl L . flteSH^T 9-tX^7 

zmtxm%&-tz>bz. any 7X7. h^^- cot a- 

-f ;l/xy H isATJ»iFt>ME.(DT 9 -feX^W y hfc it/ 
ITIHcOT7-fe7yN7"$:jil:TfjieS-cOa#*-9--^^CjM 

ff-ts i: i-c, frtenrcot^M ykxy nyxxA^fr 
les-oaii-tf-^-^ , frie*- Aan^-v^casart 

h\z, mW&—(F>^A ;yxy K v-Xx A^fjfeUHcO 
r7-b7M7^at-CBai*§il7 > cfc^. ffieSHcOT 

9*.?.)\ir*kwm.-'<F>A y9- r 7-*y9MMb y y 
7-ri»7x-/7°s-^ ; 4>k. itriesHco 

T7-b7,'\7M:fjieS-c 7 )^ y7-7-^f yfmS&bif 

y y7$ix^c fjiesz<7)T7-fe7^7-i:ffies- 
co-f y7-7-Jf yym&bcofficov y7£«r&7 

f-'yrS-#tf;<t€r*f^4:-ri»|«^iMl 5co^a. 
[fl^ifl 7] fflE7 : r-y y^-y h7-7^'$^(c 
mmcDT9 *x;\7&J:lfm-bM=cDJ y7-7-* 
y^IgS:^ ; fjie*-A*-y h7-7*^4.^SH 
c0^y7-7-dfy7'^^^ ; ZCDjjmtfZ t>lz^ 
(7* — V ylZ&KiXit) T-97V—J±&m=CD 

^A'-fyUxy FyxxAtfrtESHco-f y7-7-^fy 
7«i^3ltT:fiieSH^-f y7-7-^y7^itgi:cO 

(*-Ati3v>-c(i) T-77y-A^frtes[ac 7 )^ y 

7-7-* y7«tgi: S-cOiifitf-AM: cop B i-C'3ifi-r 



(7) 



fflffi^l 1-284 6 66 



■&X-r«y7 0 £-ir# ; Zo^-fim^ ^z. ffiiei&H^A 

£il txn%m Sfi'J ?x.x f- £ ftff BUSH?) 
^/\*>f yuxy H^XtA^^>H0c7)7^ -bX^ y h N 

MfB3?0^7?*xy\7£®tTSSfl£ft££:£. M 

ibs&h?w yf-v-^yrmmmiimmnj y?- 
y-^yymmt vy?^hx^^y°z^?>. ■ 

mszm^cD-i y^-v-^y^mwfmm 
mnA yf-v-^yymmt v y?ztitzmz. miB 
m,-oi4 y^-u-^yymmtm^B^ y?-7 

-*yym.mkc7)mo >j y ? z «t h ? r^-^o 

^ i: ^sat-ri. in^if 1 6 mm. 

[H^i8] WM7*-vy*>vhy-'?ifim-'<r) 

7*- Vy^-/ b>7~7 t&%$tl. Zcom—<7>7*- 

U y* y h?-? #3 ^JfiEcTM y^-v-Jf y^H 
; l&Z?)7;j— U y*y 

^y^^^-ir^ ; Hulfi^-A^-y N7-?i>'$^^ 
-t*M y?-"7-*y^sig£-ir^ ; ;^M* 5 $ 
fc. (7*-yyfc£wcii:) T-?7ls-J>.£m 
0^AW;Uxy Kyxf-A^ftrfBSIS^M v9—v— 
* y^^SriltTfilflB-to-f y^-v-jf y^fg 

t ^T-iifrrS Xf -y 7° * ; Z (VUmtfZ l> (C . 
mm (*-MZ&^X\t) f-^7U-M.^-tcr>-( y 

?-y-*y?mmkm~<7>mm-*t-'<t?)F£\z'mm-t 

£Xx-y7°£-^ ; ZOU&tfZ £>K X B-flfimEa^/N' 
ypxy h yXfA»l L . UiitEfiSiOT? -fexy \'7 
*atTHfMW-&i:&« SilU^xxhSrBfltfimH^ 
^y\'W /kxy H yxxAfr^lilEc^x? y h s 

1I«077 -fe x; \ 7"& X U : W,Z.cr>mW-> N'£il t T * 
-ASii-^-ys^Mff-ri, ; £ sulB^E^^ysW 
xy H i/XfA 2r HulB*-ASf*^-^{c. fflBmt^ 

my?zmn-thzt%<. mm$-f&AT-v?Z'k 

; Z^mti^ t>t,z^ lulEHE^yN'^^xy Kyx 

mmtwi y?-v-*y?mm:mmt<r)<n 
jy?- r 7-*y? r bV7y?&X7-v7'£'kfr; z<d 
umrfZbiz^ mimTXn-t y?-7-*yymmtm 
fBf&-b?M y?-v-*yym&t u y^^titzmz^ 



luiBm^-f y?-v-* yymmtmmitM y? 

-7-^y^mmt <r>TM<r> i> y? s y 7-£ 
[ff^ii i 9 ] fliffi7 *- y -y h y-^^m-^ 
u y*-y h t>izm%.e>4 yf-v-^yym 

mz$& ; mzc07^--'jy^-y h7-^*iBZ^#f 
ms:^r^-lr7.yN7'ioJ;^AcO^ y^-7- 

*yymm£$fr •, MiB*-A^-y hy-?^ ^icig 
-btmAco-f y^-7-^f y^Slg^-ir^ ; zoumff 
£t>lz. MM) (7^-Uytcfc^-cti) t-^71x-a 
Sr^HO^ysw^xy Kyxf-AfcMIBH-fc^ y^- 

v-^ yrmmt ^mxmm^A y?-v-* y? 
Wtm£ffitxmm-t&xf--y7°£-s&. ■, zco^mt^^ 

-tco^f yf-y-^yrmmtm-nmmv-^tnffl 

xmm~tZ>X7->y7°Z&fr; ZnHmttZ^Z, MIBH 
H^t AM /ny K ^Xy-Amm L . lulB^S^T ^ 
-fexy\7'€:)itTS®l|-ri»t^. Sii'J^xxbSrly 
IMOTA'^l/xy Hy^xA*^mEcy)r^-feX^ 

m^r-^znmi'thxr--y7°i^ ■, zcoum^h 

iz . ByiemH^t/ <-f ;l^x y F y XxA^luiems^T 
^-bxyN7$:jit-CWfilli$n^i:^. luE^Ao-f y 

?-v-*yym&*mm,7\<nA y^-v-^yym 

ldmAo-f y^-v-^y^m^Miemz^jlfl'; y 
^^.jy^-^^xx yr^-ir^; z^mtfZ^z, m 
imt<7>i y?-v-*y7mmhmm-<mmr- 

mrl&BA^-f y^-7-^f y^^iuiem 

y^-7-dfy^HSgi: U y^StifcfJH::, MIS 

yymmnmn u y ? zmm-tz^ -y rzistsz 
t mmt^utm 1 9^a. 

A$r^ s 7 =r - u y ^ y h y- ^ tfWi—tnmfrr- 
a\ m-i:^~OT^-bxy\7'ioJ;Vm-0^y^-7 
y * 7h7-^ rt-Cffl v ^ h W,-<Wzt s" 

-f;kxy FyxxAhlute^-co-f y?-7-*yym 

mtcD^m'm^yv^-t&mtXfo^x. zcdk 

yvisx^Atm-coTf^x^rzmtxmmm-co 
^ yf-y-^yymmtcDmxmm-t&XT-'yT •, m 

T<7*^\7'zmtxm%mthb%. m$>j?x.xh 

7.,-tr-f y h J; t/m—OT^-trxy n7^31 tTMIBH— 
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y H S^AfclWBS^fifl^-Afc , ifuiB*- AS 

ffiim~<7)T?*:Xs\ 

[|f#JS2 1] HyfB7*-l>y*>y F>7-7#$£>k: 

*y?mm£-&?>- me*-**? hv-^^^^m 

ZLco^^^yVi^XTAtrnM^MB^y^-u- 

* yyffi&t cofflx-mms-coj yf-v-^yrmm 
*mtxmm-h zn-timtzhiz^ 

4y*-v-*y fWffi k &-<r)®m-> < 4: hiatal 

frri»xx'yrsr^ ; Buie^r^ 

^y \*>f ,ux y H yXfA^i L . mff BfflHOT 7 -fex 

tx tine*- asihw N'fciUfrr 5 <r t t\ Buiem~ 

co^y^ ;l^x y F yxxA£ flfriEtf — ifit — y . 

ffiie*ia<o-r y^-v-^y^mmtmi^m-comm^ 
-*t<rw?)vy?$:wsrr&zb&<. mm^hx 
Tv?&'k*m&&»v nx h^mm-va**?- 
mib* — ASii^-yN*^jiifrri>xf ? ra^ m 
fBf&r^ y?-v-*yym^^mm,=<n>A y? 
-v-*y7m&^com£**-mmmmi-&v7'x 

T"-y 7°£^7>. ; £ <7)2r&#;* ilutBJiri^y-W/u 
xy H i/Xf J>&mmE.<?)T 7 *x;\7ZM tXMS 
BZtitztZ. ffl$ffiE.<v4 y?-v-*y7tim£m 
iffimcoj yf-y-^yymmzv y?t&x^ yT 

y^^'friemraco^ y^-y-^y^tgt y y7 

WSfOA y^-v-^f y^mmtcofflc?) u y 7 ^ tuiif-r 

&7t -y7*£-&£?.I i: Jffltt 1.11^112 0<7)7Ti£. 
[fl#JS2 2] flfB^^-'jy^ y hV-^^-O 
7t-'jy^7 t- 7-7 ft.. i^m-c7)7^- 

'Jy*y h7-7^^.^E^ y^-7-^y^« 
; ^Z07 *->j y * >y h 7-7^B~OSi* 

*y?mm*-&& ■, H«iE*-A*-y hv-^^sttsi 
\xr>A yfi-v-^yrmmzizx- ; zonmifiZ t> 



ZiO^^^xyh'i/Xf ^kM^-t<DA yf-v— 

* yymmt omtmms.^ yf-v-^y^mm 

itto (*-Afc*iVYCii) r-fyis-^zmmtw 
Ay?-v-* y^mm t m-nmmv-j < t ^ra-ca 

fi-fl»7.x'y7°S:^ ; tuIBmHO 
xyH^XrA^fflE^0^r^-bxyN75:iitTlfS 
ll-TS £ » , Sit U ^ h S- buIBUZ^x y Hv'Xt 
Ai^^r^tx^yh, miBmra^r^-bxyN 
7fci;^BulB^Zc?)Si|-9--y^}ltTHtflB*-ASIi 
if-y\'tciMfi-f S c i: x% HylfimHo^ysw iny H v 
XTASrfflB*-ASilW-yN'tc, luieH-tco-f y?- 
7-^r yfmmt H?IB^z<7)3ifi-9--y N't cohw u y 7 

IS^E<7)T7-tr7yN7^3itTSSi*$ii^i:#, mfie 
mAo-f y^-v-Jf y7WMZmtm-t<?)4 y?-v 

-*y?mmt v yrt&XT-yyz-Sfr : ^w&tf 
^^z. mtzm^<7)4 yf-v-^yymmfimmmt 
cdj yf-y-^yymmt o y<7Ztitimz s Miem 
y7-7-^f y?m&t Huiem-tro-f y7-7- 
d ry^'litgi:^P^Uy7^K)Tl-«»Xx'y7°^Oi 
i: ^ WSt -T SSRSJH 2 1 

C«I2 3 ] flHB7*-U y^-y hy-7^m-o 
7*-'J y^ y h7-7i:^$ft. Huia^-^7^- 
U y^-y h7-7^$ ^^EcT)-^ y7-7-^y7'« 
IgS-t-^ ; J&Z<7)7*-'J y^-y h7-7* J HZc7DSii 
-9"-yN\ mmcOT7-tXJ\7'&J:rsm7X<V4 y7-7- 
^y7«^^ ; HUlB^-A^ y hV-7^^>^ 
-ttJi^HA^'f y7-7-^y^«fig^^^ ; ^co^ 

(7^-yy(cio^T(S) X-77U- 
-ASr^Ho^y^/Uxy Fyxf At mr!eS!2;c7M y 
7-7-^y7m^ffltTBuiem-to^ y7-7-^f 

yymmt ^xmrn-th xt -y 7°^#^ : ; a* 4 

%tg&c<r>A yf-v-^yrmmtm-wmmv-^k 
<DfflX'mm-thXT y7°z$?>-; ^-^mt^^z, m 

r9^x/sy\,zw^wth t s , ae'j 7x7 h ^mrie 

m^co^i-l ;Uxy H yXfA*> ^>^Hcor 7 -fe7s^ 
yh. f)IB^0«T7^7y\7i3J:ly r lwiail~cOSIi-9- 
-^'Srii CT fB£*-Agi§-9--y\'(zjIfrr I. t T\ 
Buie^Hcy)^ y ;l^x y f y x r A £ m IB^ - Agif-tf 
-A^Hg$JJ-f!,.7r'yT£-^ ; i^ffi*^^^. 
HMlB^Hco^y ;l^x y H yxf A^Mf B^H^T 7 -fe 
7yN7^il tTSaii^ft^t § . mmAcoA y?- 

v-^yrmmzmmmttA yf-v-z-yymmk 

A<0>f y7-7-^y7«S:BtilBm~oaft^-ySi: 
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yymmt om<n u y 7 zwm? $> ? r £#t* i t 

^#®i:t--g.|f^JI2 1^}£. 

7 *— U y*«y b V—7itm— WSHW- 
;n\ S5-OT7-fe7yN7\ *3=fcT/lg-t^ZO-f y?- 
^-^y^'ll^-t-^. *-i,*>y h7-7#$£>ldg 
=^ yf-V-^yfm&ZttS^-y b7-7ft?m 

#:IM» (7*- VyiZti^XlZ) T-77U-&ZM 
— WA'^^xy Fv-XT-AhMteSg— <r>A y?-v— 
*y?mi&zmtXimzW,=co4 y7-7-3- y^lltE 

t<7MX'm.m-ti>^ yy ■ (*-mz&^ 
xit) T-?7i^-A£fjfamHc7M y^-v-^yy 
mmt mzm-^mmv-^twmxmm-t&XT v 

7° : iwfSil— <F>^M)V^y FyXxA^I&U MIS 
Jg-<0T?-feXVN7'£®tTBfil£-f!>fc£. SgiU7 

77*7,-}^ yK H-^r^-fe^N^tJitXH-^S 

X\ mz&.—co^sU )V3^y F^XxA^fijffi^-AS 
iJW-Aj; N HulEJilHcTH y^«tMie 

^-coaft-f-Ai; <7>ia«o y y9*>mth z t % < . 
AT>y?i)K mim-coj y^-v-df yymmfrbm 

im~cr>>t y?-7-*yfmmw$3z$:iik-tmM$: 

mmt&-*7AT'y7'*it* ; zcoumtfzuzmszm 

—vy&u >v^y h vXx^^Miesi— cor 7-fex/\7 

zmtxnmmtititz . mzm~<o>t y?-y~* 
y7®mzmM&&=<r>4 y?-v-*y?im&b u y? 
•t&AT-yy ; tj £xsmgm-e>4 y?-v-*yym 
mtmzM^oj y?-y-*yym.mk y y? sfut 
ttfcv tmem-aj y?-v-*y7mmtmsm=<7) 
4 >f-v-*y7'®mb<7)m>V y? W^^f 

[11*312 5 ] BUlfi7 :j- — y y* -y h 7-7#fg-?) 
7*-'jy*7h7^kl*$ft, Mfem-^7*- 
y y* 7 h7-; L>\,zw.m<r>4 yf-v-^yym 
mZG* ; »Z07*-'J y*y h7-^^mz^sii 

®ZcOT^-feX^7'joj;VB£^-fy^-7- 

*y?mmz&fr ; ffie^-A^-y h7-^*<$^tn 

y^-7-^f y^fiffiEfc-Sv* ; znumtfZ t> 
tz. JSUJ (7t-»jytt}nrii) T-^7i^-A5r^ 



#>^Twesatx«nEiRAwf y^-7-^y^ti 
fctor B TCjift-ri>x^'y7 o &^ ; znumtfz^z. 

^ y-^ y^i|tgtm-c7)51fi^-yN'i:<7)iaT'3l 

m-thXTv?*^;*- ; znjimtfz $>iz. luiam-cT) 

^iSxyH^rA^ISLs Hrie^ZOr^-b^N7 
\M ;uxy K */XTJ»frt>M~0)T? -txtfj v V . 

BuiemA-f y^-v-^y^ni^t Huiem-^iifi 

yuxy h* 5/^-rAj6*friESSZ<or 7 -fe^ n7 Sril t XM 

iwiaHyvTM y^-7-^-y^igH'j y7-ri>x7 i y 

* y^lg^mriemAco-f y^-v-^y^w^t u y 
7$ti^t. mmmvj yf-v-^yrmmtm 

iffittJ yf-y-^yfmmtnfSkw y^zwm 

•fhXT -y 7-fc-atfi t *4#fSi: -Tl>lf *TI 2 4^ 

So 

[ff^JM2 6 ] HUlB7*-'J y*-y h7-7*^-^ 

'J y*-y h7-7#£ bizmwcoj y?-v-*y?m 

^-^T7-fe7.yN7"fcJ;l/m£0^ y7-7- 
^y^ffiSr** ; Mie^-A^-y M7-^3&«S6(c» 

ttxr/m-koj yf-y-^yrmfez&fr ; ico^- 
m&Ztnz^ ffi® yyctjv^Tti) f-^7i/ 

y^isffi fc ^BiTjiflrf s -y r : i c^^^' 

tBm^-f y?- i 7-*yrwmtm-<7)mmy--'<t 
cofflxmrn-thXT-yyt:^: zn-nmifiZMz. m 

T?*.x>\7zmtxn%m-z>t*. ti'jmh 

^fifE^lI^y^ ;Pxy H y7.T-A*>^>||z:cOT7-«r 
7>;iM y h , m~<7)T^-fex^7*tJ«tV»Z<0St«W- 

s<*m tx mM*-^m^-^zmmth z t x\ m 

'^zmm^-thXT yrz^fr ; io^$4>tc itriB 
HZO^^nV ;uxy k yxTA^Baie^-cor 7 -fexy\ 

^y^mmmmm-tcoA y?-v-*y?'mmt v y 
■7-thXT-ymszt- ; z^mt^^z. mmm-kcr> 
a y?-y-*y7mmzm&5-commir-'*b o y 
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^l)y7HUIJrr-g>7xy7'£-£v^; £<0}j1£#'££> 

^mmtcorsco vy? zvm-t >x r £#t* ; t & 

cr>y*-Vy* v by—ftzts^xm^ktihm—cr)* 
) U fix. yHyXfAt Jg-Oilfllr-; S' Ofto&g 

^Ay^7^a^tj>ot, fine*— oy*- 

^-y-^y^^S:^. B«tBmz:c7)7^— 

h "7- 7 3&«mz<0SH^--y n' . g?-c7)T ?tXA/fcj; 

tflR30<f y7-y-*y7«£^. *-A*y h 

y-?#*-Afi»-9w?*j Jtf&=<*M y?-v-* 

yrmfctt*. zvmktf ■. (7*-yyfc*>^ 

A y? -y-* y rmmt ffien-^iifi^-^ <fc oFal 
TiHTf SAf y 7" ; MESS— sDf-v-f y H j/^f 

2> i: # . as »J 7 xx b &miE&--WU )VX yKy 
XxAj&^H— tf)T7-fc7.;KW yK buI£^— c^T^-fe 

7 - v y 7M t Mt£m-?)3Ift?-; < b toU^ y 
y7£«JBrf6£fc&<. B»«^S*t «y 7 ; MISSIS 

zmtTftg&ZtitibZ. BufBm3M y7-y-* 
y?mm£mm-(?>A yf-v-^yymmt o y? 

■f^Xy- yy ; *$ «fc tfffi8gf3?>f y7-7-^y7"lS 

tfcWfiriasiitfW y*-y-* y^HMgi: D y7£*ifc 
at=. mmm=coj y?-v-*yymmtmmm~cD 
4 y9-v-*yym&b<rmw) y? ±qmthxrr 

[fft3fclB28] *-A*-y bv-?t. m-&£VMs 
~cr>7*-vy* y by— ^(CfcV^TfflV^S^— (^)tA* 

^yF^7t"S:fir?£-c&-5-c. fflfiESt— ^y*-uy* 
•y hy-^^m-oss-f-vs'tjii/m-^^ y7-y 
-#y*T8ffi££*. «ne»z^>y*-t)y*^ F7- 
7 #fg-<Daia+r-y \\ ii-cdt7 -txy sytj j; x/m~ 
co4y?-y-*y7mm£$fr, MB*-A*>y Fy 



tjvvf(i) r — 7 7 y -A £gg— co^y ;px y F y x 

t a i: mm-co^ y 9 - y-df y tmss- ii t t una 
»z<o>f y^-y-^f y^*agfc ^t-iifi^ af -y 

fEJSH<M y^-y-^y^figi:MlBm-^afi- , f- 

^Si : cr)rHlT'3ift-rsXx'y7 ,> ; mflBm— OT/'W/Hy 

<0 T ^ -b 7. /> 7't5 J; 1/ M IBUZl^aii-^ — y £ 31 1 "C la 

A >vxy F ASrfffe*-AaHW--^'tHaii-r 
I,7x-y7 0 ; MeH-^^NM^xyKyx-rA^tulE 

y?-v-*y?mm*miw.-(r>4 y?-v- 
*>rwffiizv y?i-z>xy-y7 ; fuessia^-f y^- 
y-^y^fgSrBuiam-ojifi^-^'t u y^-thx 

T7/ ; lufamra^^ y^-7-^f yrmmwmm- 

<7MiSy--;Mz vy?ztifzt%. mm^A y?- 
y-*y?mmbmzm-'<Dmm~ir-;<bcDm<vv y? 

y^m^mSM-^A y?-7-*yymmizv y? 
Ztvfcmz. m^^co-i yf-v-^yymmbmEZ 
m-<7)4 y^-y-Jf y7mffib<r>F3<7)y yfzwm-f 

&ZT-v7*-5tsc\b$:mmb't&um. 

[000 1] 

b^V^-bT7*X%ifflg.7x4K-b* y bV- 

?ih-}£x*mKxmw*'}rv bisamm-T-f u y7 
wU)vx.ybisX7-wgm\,zmth. *%m$. 
mwzMzMmt&Witt*? y 3 y^y K^-Acot 

[0002] 

t A4 Srii tx x-if 3 y tr a- ? 2^ u qE- h A y 

5>—^ y bT J ?*.X*W8k'$h 30»f y*AXyf-< 
x-fSr^f. ^— cot'y^xyf -( f-^ffi. 
T>y7 ,, ^<yD^!#^*l^-<TOmiSy7,T-A (plain ol 
d telephone system. POTS) &£V*li^— h'Xflt&T— 
^^•yhy — 7 (integrated services data network. 

isdn) mn&£v : Mmi-&mm<k%.x*hz>. mm&& 

{i. ^S^^M^ y hy-7 (public switched tele 
Phone network. PSTN) 6 <?>&j!ttZX X 7 4 TSr^ffi 

L . x— f t Mcr> 2 Oct) t* y'^x xyf^f-ft corals 
[0003] ^t'y^xxyf < T- (4. 4 y?- 
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*>y W-VXTu/My (ISP) ISPii. ^c?) 

-f-bxx 'J ri^iH— ^^,1, ^(i^cT)^ y h^-7"7° 

H£y.X (point of presence. POP) 8 SrHMfcilA't 

fc^ctSSR-t*. iSPti, isp^lB^iDA^^-SiS 
3ro-;^r/-'jy;yxyTl*l£. jftSSWfcti. 

popsitotr*. popii mts^ati^TSfflsa 

|.PSTNK^7t-yh7t7^J, ISPfcJ:-? 
Tfifftt^ftS. &&V^iMCI,Inc.^)>f yh5*-y h^' 
•y 9 yrzu U ?frt> ij -X Ztlh A V h 7 * ? r- 
A>y 7 *'-y l 0 ±T1i^ftOTV?/i«t;:£J&t 
iSPfcL AMWfcJi. PSTN^j$®£>fc«>fc % SIS 
*4b&^T15-f>'0-ai5tL<*)^». *SVW39>f 
y<9— SKtL<(2£gB£'J-;v$-6. POPfclSPO^T-'^r 
7f- m^Hit -f y H 5 * y h /i v 7 #-y_k 

yf-yk e-*-;k fcil/^xy^xh-tf-h'x^ 

/N'SrS^-r^ i fc Tilflirt* i i; WV* h . ISP{±$ 4> 
[Z)V-9 1 2 A£&J?M y^-^-y KKy^jJf— y2 0 

^£<7}^ -f/Wce ^XH. X y H JL-Hf (ii-if <7,HS 

i jl— if ^isp t comzy— t'^ wffi . 
»SttW#fr68"J^lt#»£g(tJRS . i> Hx— f 

ti. ISP(C77-feXL. ISP5&>^JR-f y*-*v h20 
£77--bX^.g>#. ifttiS^ 0 <wmz¥4 L . 
-f^-*7 htS^S^tSM^ (Internet Engineer! 
ng Task Force, IETE) tfffl&th-XA h> ■ V*7 • ifi 
-f ybroha^ (point-to point protocol. PPP) b 
Lxm$>tilMi&7B haju^y y-T& z b X3f% 0 . 
[00043 15^)tV^iyf ^f-(ll 

u -r*t£/u-? 1 2B^iitr^ffl-rs^^-e*> 

* -y H * -y 7- ? 1 8 IZ7 9 b7.-f & Z b ffX't* h 
**. ^^(iPOTS/ISDNDf £±MC0 >J hT7^X^r- 
1 6 tZfrif^ IETF PPP7°n h- ZVUZ y Vth Z\ b Tit 

tcbtih. &M77-k*cr>m£iz. xynx— im^m 

HtJi. xy Hi— f fcifeSM y h 7 * y h 1 8 . 

y?-*y h 2 o . fohwm%izimt'thtz#>i l z)v- 
[ o o o 5 ] xy Hi— ms^atc. mtsu? 

3. xyHi— !fii. S4»fciSPfc, ISPO^-y HV-^ 



fed. #HBUti. *ilI-tf-fX7°aySW^\ Wi.{f. S P 
rint PCS. PrimeCo^. M^'C ^^■cht-t 
XTnySW ?\ AOL. AT&T Worldnet#c7)M^"fc 

t^xmrnrhh. 

[0006] >9—*v Y-f—MXTutM ? 

n yfy h^x h-^-b^fe iiXn- 5 y^-b'^Sr 
xyHi-lftltflW*. -?-yy^fg$^. 49BI:ffi 
*St2&^< "7-7- «y H-fe ^ yf- y 3 ycoMMcoftZ 

cotzMz, ispizv-ityzfai.-fitiMzttMmmir 

-b*^Sr*46Tv^. liWKii, iSPli. igfiKy^' 

^«y hV-^SrfflVvc&i&^-y Hv-^fcRigJKt^: 
— TA. 77yj.f?/'ny- > t>il>*-+f-b'X p c p 

* -y h±T'OW^. * b' ^ U -r 4 i>iiffc£ *i* «I # 
«>t . in ^> WJp«fil+>--b'x ^ fflv ,r fc 

i:i^>T*. itl^#jDM-9--b^p ( lc7)^<(i. 

* y hV-^^-b'XOiEBg^A-g.*^ Ztlblttv h 

y-tjyyyxhyfj-^mmzntxiz t^xmm 

-fhzt imt&b%& . ft!!^o(0#Jn«flH7-- bx 
(i. z\tii>*v hv—rjyyyxhyfi-rfrbW 
h z&m b-t&r-rvr-i/z y*r- b'^^c 
AO. ffcc7)l!lo^(i^>y hy-^-f y77^h5?f+ 

7°7jK-h*yhv-*y?\ p-sy/, tb^y 

x >f , -9"- b'7 n a nfi . Hf- bXp^WfcSO < Tijijy^r 
jy?U. ^t, |6j±$tL^^ y HV-7-f y?77F 

it#Lfci: #(;ifl^tf-b7.^iIJpT^ Sid H-TS 
7t46^)7 -y ^ SrStt-r S . at-t'X7'aA'4 rti: 

«f^V-7- y h-b^X yf-y a yiCTtSftT- hZb 
[0007] 

[SWB<o«S] iyKa-fC, y^ 

-^>yh. 7*7'f<-h4yh7*7 hUXX/A y?- 

* -y h -»f- bX7'o; U^-hfcigT^bT.^ 

. to^r ^■fe^t-'jy^-yhy-^^ 
stfi^ i: ^-A^t- -y h "7-7 ftcomtimz: m txmmco 

4 yS-^x.y^M<0TX-tm^tih. 
[0008] ^mw—mmmz. ^ebV ijf -ffl 

con^^y a y^y^x—j^i) j- a* u^fJL. zti 
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fc-rsxy HJL-if^-f zmm^t- - y h^mf-** 

fc, iv-*r4>wmM y?-y-*y7mm3--v 
x/N7"AHfc tnwftis ) fc4 y^-v-^y^fgxx 

•yh (IWF.xx.yr-) fc^ttf^XTunnelf-^^^ig 
gt-TSii: fc&S. #f£Bjo£^fc£>d--o<7)iW{2, 

7 * - »j y*-y h v-tfiKDj y?-y-*>ywtffi3. 

--y h fc*-A*>y r-7-?pVM y?-?-* y*T» 
fgjL- .y h fc<7)|§jfcI-XTunnelf--v */l/£iift1-S i fc 

yy^'"7°ah3;l^ (layer two tinneling protocol, L2 
TP) StAM^xypy^f AW-htlSi ? t 

ii, PPPjifi-fe 773 ynffltewmlz^-y bv-7Mco 

t v ^mtH* mmzrnm tKtfmmizmw-t&z 
t-mmizmw-tz. 

[00 09] 

[$»»Htf>i¥*l$riej$] #38HJ«i. ayea-^a- ffc 
4 y?— *y ^7'f'<-h'(yh7*7 r-'V^lUt 
- h- T 7 -fe X £{Kig7" 5 >f <— +r*-y h -7 - 7 "f- 

y—txruju yizmmv ytzmtxTt-txi-z 

•th. c\ZX\ u-zyytli. *mHz£-,xt%®iZ 

y?-*-y ^77^^-h^yh5^7 r-fcH^&M 

■CSSifcto ££!*■$-.&. hy-y-y:, yfc^My 

?-*>y h^yh7*7 h-TrUy"— y3^7VL 

«, rax-;k 7tM;M&gjM, 77 7^X-y;^www 

r^-fey;^, >r b<nm®.£.mmzti&z<?)m 

<r>t'i;*xTT0 *r-is g ytf^ttit . ;c7)^ y r-<7 
-7fcHETI^fcJ|S8|l-f Sfcftfc, Cl<9*>y bV-7±. 
T'RTP^COX h>J-$yW^ T 7°d h ayl^H. 323f£ 
<7)£Ii7'n h 3/1/ £ 5 y-f s >! t jPWc&& . 

[ooio] mzmmffi&h2>wmfflv>m«%&mz 

$>2>m<7)4 y?-*y bV^-bT7*XfflftbLX. 
POTSfc J: 1X1 SDNfc^X ^-f -*7l/7 y 7*7 y* -tr X , 
XDSL7 y--feX, GSM/CWTDMAfcg-?< f£||[sIg&3cJ£7 
y--»rX, 7— ^/l/^E-fA. X<7)is XT- 



4 . MMMmmza^hy^-xyiVTyv-^ a ym 

£t#Sfc -fh ; fc fcflDi. , umryJ h*7h y- 
7*y?°, n-sy/, tt'^jf^ a— ffc^-f 
X7w s'/f ^coffl^WSrf na&OfcyxW- t-'xc^pj^ 
cOit^Lfc^-y hy-y-^-trxft-y^-h-tS. 
[00 11] ^— V7/l/)Iflv'XTA (PCS) ayx^.7 

b7j*m^&mwtv-tx7'u'uyi l zttLxi±, 
^^mimfs^ttfc i -5 xmmzti&v-t'x b -hhcsi 

l£1-£vrfc 7"oy^r(i. >f y 

7-* y ht-t'^rnyq LT i^St-f !> i fc ft 
ite»t4ifct , C&'&. Zcom-Sli. 7°u/U7°i<i., * 
•y hV-^^S:FyT"#fcJ:t/'3IfflL. xyh' • yy • x 

y h'-F- t'^fta— *r fcuflwi i fc fc . 

[0012]^ y7-*-y h+r-f X7*a^M ^ ( inte 
met service providers, ISP) tdfrfb'Cti, ^HB^(i 
■i yf—Z- y h-f — t'X7°nyN'-f 7"if^<T)X^7 b ?J± 

zmxh z> v m u -x-r s ^ fc Srfrffit. m^as-^' 

B»t. xyh" ■ >y<7 • lyKt-h'x^a 

wy^7b fc # fc * -r g -r±#-r s c fc # 
[ooi3] #&Bjjte7U*i/7>-e& o . ;«fcK>. 

*^BJ(i s ^ y^-^.y h-tf-f ^7°nAW ^ (ISP) 
T-liSK.. #fc. xyH^L-ift, isp, -fy?-*-y 
bh^^y^^-b^y N5*7 hT^-feX^-^f* 
-rs*l^-9--t'X7*ny^ ?'fcfc -?T^«Srrft4*f 3&»9 
*\ *»H.B«S4)fc. xyHjL-iftteHr^-fextiJ: 

rfcfc^TiW^rftS. *3WBti % $^fc, *|||7*^ 

<, ^«y h , 7-^^)i!ia«|54J»Srfl!i<OISP*4^«7 , 5W 
b-i yby^ y h^v^T^^X^c^fcfflV^ifc 
ftHF-r^-h*X7*D/N'-f rfcfc oTfcSnBT**. 

[00 14] H2fc^-TJ;afc, xyb'v-xrA3 2 
(fi^Jxtf, Win 95y\-V-7-;Urjyh 0 A-^fca^< ) a 
*»*>y bV-7 3 0iZ^h^>U±\^^T^m^ 
X%Mt&. ^fi^tfAll xyhyAfAiyf-f 
TT7*.XUW (medium access control, MAC) 71/- 
Aftxr f y? 3 4 £il tTiSS^S i fc Sr^lgfc-f 

& . T^att r Aii p c fcwuj) s v m*m oytziti 
xmrnztih. vm^rMmfczti. mm. s«± 
fciflESix &JSi«fittr yr-y-fc |si-fiSfciss$ns . 

^gB^rAti, jl— f^PCfc, mT^S : oi 0, 
803.2, xxy\*— ^yijr/W^, /^WWf-h. 

*?h, $A>fc(i, isMiii8'jy^ort^ffSc7)-oftffl 

V^T«SK-tSifc*«t > §*. PWtf-'Afc LTt±. 
L<ti, 7-y7'h-y7°fc^tr.§.PCMCIA^-K$-ffll,\ d 
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[ 0 0 1 5 ] (£IU U TOOMB^s n'u. . y y^tfe^ 3 6 
tioT^Sm.. »^3 6tj;-oT^f*$^l>X7 

-fe/HM hfldPSC (A°-y^^3iff-f-b"x) 

?)#AU< >y ^'x u Tl*l?)xy h y^r A*^jI^>tL-i> h 

A-y 7 /M> -y r- 7-7 3 8 £>I tX ^XfA^tA' 
4 /L-3c$!by7 (mobile switching center. MSC) 4 0 

[0016] &ftmz, xru yfcomctPm (^i) 

m& j: tper a<o 7 w nztt txi$m.xh h . *>m 

cOT-^Tt^li. >*v?ft—)\s*v h>7-7 3 8<7) 
VmmtS XX/ b #v 'JlZttLX M&iLXfo 2> . A -y 7 * 
-/P* 7b7-? (C*ff 2> Bt-cOgfrti . ^ >y 7 -)V 
j-v bV-lifiA >9—*<y hTor-rj^ (IP) y\°y-.y 

tc&mizxfr-i- < yy-th®.nzftn\txfo& . ^ 

^'-f;l/^y^4 0 (MSC4 0) fctHvai, Ay->y 
YT-9^y^ T 7-^y^mm.(\W) 52tfZC0*-y 

hy-?iztti-&mmy°vha)i<$:m%5-tz>. wi-? 

4 2{iMSC4 0&^-f y?-^>y bAA, TyA«.- 
M y by^-y b4 6£>&Wi-f y?-*-y h-t-h'A 
roA^ (ISP) 46\,zmx-th« MSC40rtcO7 > ^^ 

-f y^T-^fcioxV h uffi$S£fM*nM>. xi/ 

^yMW-y^Oii, gflfc^ IWFfcJ:tA'7#7y 

[0017] m^y^ri yy-v-y-sii. rii^y^A 

yy?-?£3-- j nzith->XWML. Zcdt-?^ 

-txyxjs-^ ycom&i'X c rMzmm-tz>. rai^y 

(i. Tfj^iy^r^ y^ffiflSS:. American Management As 
sociation (AMA) Ml/3-H7t--7 7 MrTTCP/IP 
(transport control protocol /internet protocol : h 
yyXtf- b®m?°V b y^-^y h7°C? h a 

;u) byyx7it-b£mtxm&>X7-^ (ztii>m*k 

V?) iz&mh. 

[00 181*7 bV-VA yyyxbyt+vrux, 

A PPP (point-to-point : #A y V • 77 ■ #A 

yvrvb^iv) t-t'x^xy b^Xy-Mzm^-f 

( i ) u-$yn-t'y; (mm^u-yismmzn 

X^hW<ct>¥ZX'huy-<{ yx%&*r-tx) HZco 

v ! ^yb*7ir-t'x$:m®-?&, iyKWfA«* 



•y i,zuy*yLtzt% . mfeV-t'x (o^ 

&VV7--fX) ^ ffij-t-fx (oil AyK^7 
-F-b'7££^-f ■S.-^-bT. ) o^Tix*^ U 

tw,mLx?r%bti. z\<7)tz, mxzti&v-t'xo 

VK)V, ^ybisX7-Aco3---?i,zi.^xtoAZti&y- 

iooi9]xy hyxf j*vmm&^ ajg^-t* 

X) SrJltKL. *»0. iyKyXfA*^-A* 7 h7 

-?f*iwag-r iwf (-f y^-y-^fy^ 

tg) tfmmmwzmmzti. Mzx^xbytvttf 

xyHjL— •ftilii^-A, PPP-f-A' (oi 

0. S^§til)^^/-K-f yh. ^Jx(i\ ISP PPP-9-- 
±MAyhy^ y bmy--;<, fc^Uiissa-tf-- 

mwcDTf-txzimt&tzsbizMmzti&pppy--^ 

m) bc?)WlX'$>mZti&, y( 7 t-y>5b77^8 
0%^;c7)^r^f (cASCfc^m^ns. ^1 

-isX-^^sW^^-fey^^f .X -yHr-^h^b -y 

[00 20] ffi7j". xy^yXfM 5 (*-M>7h7 
-?*l)V«7*-'jy*7h7-?i()^«) fMrf- 
b7.&u^xxbL^Ji^ ftsv^i, xy^yxfA 
#n-$y^-b"* (oil *-A*7 h7-^*» 
f>7*-ijy*7 b i y-?iz&m??>y--t'x) 

Lfzm-^it . V- by 7\ WF ^ - A I WF i; CO 2 OOI WF 

^"^^fLi.^ tf-b'y^'iWF(i, ASW^fi. xyK 

y^TA^f^Lfvl^-y hV-^ (Ztlli*-^*-y h 
T 7-7XfoZ>fry*-Vy*-yb T 7-7Xfo& MiMfe 
4v^) caaiJftErtfclftiSfu ^-AiWFii. AMWfc 
*-A*«y hy-fwu n-xte-ty? (MSC) 
rtfc:lt4$ix4. dotted. ^7-fe-y>7h7^<?) 

^A>f ^Ji-fey ?\,Zt5WhX >y -fe-Sy'r- 7 b -y 

aWifbMRfcii: if 4 2> . -9--b'y : /lWF^iE^yN7'{i, 

ayvx.-?<7>m-'*xhfti l zm-®.w.i,zmw:$>&w£ 
m-^y^^-^n^zru^y^tihtz^z. by 
>v*)V£mw^y'tv-vyy\wycomizwume\y°ri 
b 3 )v z m ^x t&rr i ismttc v \ 

[0021] u mco^mt LT , 7 *-'J y* -y 
h 7-7 flo-f-by ^iWFti. I ijffl «rsg^lSHi: ^ 
$#t^-7"- b7.^7-f r^fpM^a^^r , 7 *-y y 
Msci*icoiS(i*>^iiiR^-i» i t iT-^ 1. . -flawtcii. 
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[0022] Siftmii, 7?-fe77N7'i:iJ«5:< fc ^-o 

Ayy \zwmh^\±^~?Mz^xmm-h zti> 

(air link) " t iorSKSil. 
(wireless hub) " bLX^tl^. fcfc'U X>Ky 

XT-j±*T'7*.xtf>iyh*mtXT?*iXJszri l z%m 
h^ity-y/u^Lxmm-t^c\t t> we* o , 

•I<7)l|-£-(A "T^-feXyNT" (accesshub) " tv^fflig 

mmth. «s (7 o n^y) giix-vx 

y h ( . *ns^N^'rt<07 , o-b •y-9-±-c-5 y-rs v 

*yhtmm-&Wb&i)K mz.it. mFizx^xmmz 

ftSMobile IPmmz&^Xli. 7t-'jyx- 
y'xVf (foreing agent, FA) t Of Ji'ftT ^ & . 

* - y yx- isxyhkVf&ZblzL, MTOfflVUzts 
^Xii. *fKBco 7 * - y yx- y x y h ifil etf t J; o 

T*S$il4Mobile IPg|2g<7)7 *-y >I-y'x y h 

[00 243 atfi^rt^ftfflSlix-^x y h (oS 
0. 7=r-'jyx-yxyh (FA) ) &m^Z>ZtX\ 
xy h xx-r A<ox— ra»x- y Mi, ^ 7 F7 

com: ww/wai&y?) fico%m--;Mz&Mt 

7rt<o»»^y*-7-*y7'«ffi (iwf) ts^- 
;P ( HISfcHiMSCtj J; t>'*^ \~70mftv>* Hz f£S£ ft 
TtTo-fe-y-tf-JbT^y-f S 7 7 h^xTtyx-zM <7) 
££tf?fl£?*£U iWFfcfil&SftfcxyKi'X-f AC 
m*)%Xh. fii^^xyKyXfACSLT, £ 
tft^rtco*^N7'i:^NM;l'^-fey^ (MSC) ft<r><\ 
y^-v-^-y^mm (iwf) t«:hy*;w { (xtu 

nneirol-:3^S:JI!vvC) f£5£§ix, £tf>hy*/HcJ: 
oTs PPP7 U-Aif|5xyHyXfAJ: IWFfcOl^T'i&jI 



£ft.g>. 

[002 5] CLCTfflv^ft&XTunnelTO hnA-fc 

ti, pppr ; -y , 7^-A^y-7-yy^^MjM&ii« 

■tl»7P-$iJfP$r{it^rnh3;PS:S*-ri». CIW 
nha;Wi, IWaiP*? ^yh • y>7 

• WyF^7 r-T7-?±. &SWiATMT-**-y h 
7-^7 lx-A y P-r-?* y h "7-?^>3S$xt 

ti*s v^«T3 'J y?C*o*< i k t . *g» y y ? c»o* 
<^£:t#;iA>ft, $£>C, tte±<-7.T"ft-g>^i: 

XT£>l><ri; t#i.^>*iS. XTunnel7*u h-3 
/Wi, L2TP (level 2transport protocol) fyt>cr>T)l> 

n' y xa £ jmhm- h ztizx^ xmm-th z t a*-e# 

< * -y h V-y^^te, WmMffifiWrncOXTis 3 > 

[0026] xy h'v-T.^A^ppptr (oil), MM 
(i, iWFfl&M^irffelgH yF^7 r-*> L< 

mspco^y hv-y-rtciift-rs. pppfr^iwFrttc 

Hs&fhim^i. xyKyXfACIl iSS-f y^-* 
•y hT9±Xtffl&Ztlh. PPP fT *M yh5*7 h 
fct<»iISPrttftflrt-4«^i % xyf'yXfAC 
ti, yhy^-y N7^;^t t < fi I SP A.c7)T^ 
•feX^'^^ftl). ^yhy^7 h&!>VHiISP7?-fe 
^.^^•K-N-rs^Wi:. iwtt, 12hy^7'o 
h3;KL2TP) SrfflV^T. >f y h h*&^fcfcISP 
c7)PPP^-y MzmWtt h. -1 yhy^-yhh&WmPco 

■9"— (network access server, NAS) 0)£ olzM^Z. 
S.xyF yXfAt IWFfc ^C7)PPP h7t y?temi& 

m n<?) 7 * - y y x- sy'x y h t i o x $ ft § . 
[0027] & (SO yy^) um<7)ifr&ii. xyh'v 
XxA*^IWF^[6l^3PPP71x-A(i, MACfcilXxT 

yy^^atT, atffi^^in^fts. ^ft^> 

7y-A2:, MSCrtC0IWFtXTunnel7°a hzifrZm^X 
. lWF(iMao^ft(c^ft4» SrPPPl^-y^fciEai 
•f*. -fy^-^ y bT^-b7.0*l-&{i, PPP^-yS- 

Ji, iWFfcffi— c?)~?i'yftiz&st&. ispftsv>a>fy 

h7*7 F77-feXcD^ll PPP+r-AteT^-f ^~ 
+r^-y h"7-^rttfi[SL. IHF«®2 hy^7°Ph 
(L2TP) *fflV^-Cift^SSR-f S. 

[0028] )i (to yy?) ufacom'&ii , ppp-t-- 

A^<9PPP7l-- Afi, IWFUJ: oTSlBl^^XTunnel 
T-ahn/PSrffl^r^ffi^ft-S.. £WiT0yy^7 
U-ASrhy^l^JRyaiL (fFy^H) , ift 
^xT'Jy^JlttxyKy^fAKtfilts. mz 
zcoyu— AtixyHiyXT-^WPPJltcioTMaS 
ftS. 

[0029] tt'^ 'J x-f (#«I1±) t^-K-h-tifc 
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{iSffi^iUU'xy KyxrAp^Eb ^Jf^ tmv 
7 b^xr^y H*7*SMs«tjtfrr4i t 
"t S . v \ > H * 7 (i bTPPPx y f- 4 r- *3 J; tfL2TP h 
y*)Vfrt>\im&mzW.htih . iy H yAfA«s--5 
<3SJftJia>^<0gtfi^£^IH'l> i: . 8rfc=5:XTunnel 

c7)atfe^*^^fTOXTunnel{i:^$fL^„ PPP7 

£ jl tX £ - AitH-tf-- h'xr n AW 7fctiiW 
&OIB) £*>*WB*fflnSI:, xyH 

yxxAii. *-A*-y Hy-7>4>syvc7*-»jy 

[003 1] 03 IS. n-$y/xyF^fA60^' 
7 *— V y%kWf->zX7'u>U 76 2 ■tfitirtls y is* 

ftfc'U <r*Ui. n-sy/xyb'yXfA6 0^'*- 
Ail^tf-b^rnAW 77 0 M7v§Kf££f#-7,r i: 

>r 76 2 1 79±xv-vx*imri>mm*iitrr> 

/iy F^fA 6 oti. 7*-y y*mtf-\zz.7"a 
>u ?62 ornmm 6 4 kxt >j y 7 £>i fesag-r 

£. f-^ * { o- S y ^xy K y^f A 6 0*^ 

7 * - >j vxTurtj ?62 (ommm e 4 & 

Wr-t*yyw6 6 £ffitT*-Aig|SW-b*;*7 
nA4 7*7 0^*-AIWF7 2fc:4'8&2*U *&tJ:-> 

-AIWFJriitT'f y7-*y 
4fc#*8£ilS, 

[0032] o-Sy^Sr-9-^-H-rs/sftt(i, 1-4 
y77x-7>D¥ifix|>-9--b7TDA>f tTSK >-77 
x-7#%l£-9-— W7WW^ (wireless service p 

rovider. wsp) <^W!!<93IfiOto6fcfflV^ftl> , Z 

iy H V Xf-A(7)PPP7 U— A &7t-U yWSPi: A 
WSPfc ^IStiatSfcACfflv ^JU, . 
[00 3 3] PPP71/-Afct SOUy^flfcTOU 

-9--b'X7-a^M 7* (WSP) &atT3»r#t4. fc« 
U S'l^TfffifcLT. PPP7y-A£7*-U ywsp*^ 
H»fc«Jfe*'y H 7-7" fcUftSWS 7* 
- 'J yWSP^COatfi^ti 7 * — 'J y * y h 7- 7 Kt5tt 

5xy h'^xt A^aw^^f y h tft S . zcr>7*- 
'jywspp^co^tfe^ii. PPP7U-- A£7*- yywsp<o 



*A>f /i^j&b y7rt<W-b>7iWF£i*f| N & § ^ 
{4^-t*y^iUF*»<5>ppP7U-A&S^s 0 -9--b'y 
7*IWF{±. w y77x-7£Mt-C. 12 hy*;^ 
fflWC, *-AIWFt}fi^U xyH^7f-AcDPPP7l^ 
-A^3R^riaifc:tti*-ts. 7t-'j ywsprt^-b'y 
7'iwF(ii£s/ci6cr^ 7yf-( y/f- 7 £i|Xft l . 
*-AwsPrttf)*-AiwF«SRA(?)/sfttr* 7 yf -f y 

7"r-7£JKa!WSo 

[0034] S»7 x -XflRlfc: , 7 * - D yWSPrt^) 
Alio- 5 y/xy H yXfA^-A^ >y h 

-;<&z<?)ffimm^x*-&mi:~v-;<tmmL. x 

y Hv-x-fAcoigiEtJ JtfJMtfcffifird. iti^SH^ 
f 777x-7^ffl^T^3M$ill>. x 
y Hv7f-A^12liElDj;l/®fl*^-r-g>i: , -oc^JI 
2 hyW, Sifi^fc^-b'y^IWF^iafcXTUNNELr 
nhn^Srfflv-iT^^n. t d -o<7)/f 2 h y 
*^ -^-b'y^lWFi:*— AiWF<oHfc:i -4 y77x- 
A*MtX±&LZti&. ^-AlWF(ixyH^7rA^P 
PPb°Ttlui:|Hl«^L2TP (level 2 tunnelprotocol ) 

^>-H^70l^{i, ^-aiwfco{2B 
t ^tf0L2TP h y^WiHjgSit/si i let v t xy 

FyxfAA« — -xnwmfrhii o-^comtmitzi&m 
•tht. m&yy*ivt>K mrz^mmmtv-t'yy 

iWFfc ^BBt^JftSii. mfr^Site^h -9"- by 7iWFh 
<0BK0Jafr<0 r- y*Mttm2tit. xy H i/Xy-^tf 

^-o^l-^ti. if^^Hy^* J . SfJt^-b'y^iw 
F i; ^ - A 1 WF i: CO^H^c $ il . \m<W- b>71 WF 

t *-Ai«Ft nfflnmiw h y*Mzwmzti& . 

[0035] n-sy^*ihK-H'r6fcftfc: % I --f 
y77x-7(i, !SliE^-bx, S$i+>--b7, fcit/ 
*^-f-b77oA'W 7<50*t^^-r"T- 7 5r f^iM-T S 
-b'7^-9"^- H-fS. BSW-- b7i:ai^-b7 
ti. IETF Radius7°Or-n;l/^fflv'»T- , f^'— h^tLl). P 
PP7l/-ASrl2 Hy^S:jitTi^jll'ri)T-7fi}ill 
•9"-b7ii s l-TXunnel7°0 H a^m^X^- h $ 
*t&. ;<07oh3;Wi« IETF L2TP7*nH3/Ufc£-tf 
<. 

[00 3 6] iiTUOffi^fclffllf^itS*— AIWFfcV% 
dffli§(i s xyKyXfA(7)*-A^7 h7-7rtcoiW 
FSrfgL-, ^-b"y7'lWFhv^fflI§{i, 7*-l> y*y 

h y-^^iy h y^rAtc-Bfwtc-f- b7 zm* 

•f-vs^^L. 7^-UySii-f-A'hv^fflISti, x 
y H WfA^'D- 5 y 7 L-T l ^g^-^Sril t"C 
S^Srff^r 27*-'jy^7 h7-7 WOSiilf-^'S: 

aw. 

[003 7] *«yH7-7(i, xyF'yXf AfcSL 
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&.W>2-rXK9 -J-mvU MP (mobile IP) fc 

Mil l . sseo* rtippp t Mis-r s . /hp rf 

C (mobile IP Request For Comments) (i s t^M;WP 

£i:£*Rft»tS. Mobile lP(i, 4fc, SWtttTFU 
XSr^A-f/HPhy*^ (2|5^BJ^^(iXTunnel) (?) 
xy F<iM y F i: LTfflv^ £ fc fclBSttftS . #SMH 
?>*'y F>7— :7<7)*§"£\ VM)V\?hV*Vv7 (o4 
0. XTunnel) tC*f LtfflV^*l**ft*tr HU^3&« 
IftEOIPTFl'^fcSrS. *HBJ^^'v h"7-?tf)%& 

/Sft^/W/HPfiaU^X^ F^>y F (mobile IP re 
gistration packets) ftTte. tf-A7 FUXffldOil 
(i. O.O.O.Ofc-fcvFSfiS. ffcfc>9£, WiUfcSfifcU 
ser-NanKffiBfr'fglBM— IVW&TuYzuV (simplified m 
ail transfer protocol, SMTP) 0)7*— "?>y 
f?-f ;W>Siiy mh^. y htcf+iraSiiS. .lit 
(i x user@domain&'|>JlM£'£rO. F'yW y (domain) 

—f (user) t)7», x~ f £*-A F^M yflTti 
M^£fctf>tCfflV^*lS. .IiOUser-Name«, XVF 

Six. a— ftf^-t^lzJoA'fl.lgftA-- !f 
tCfl 0 ST £>ft§ . User-Name*I<7) ( ( domai 

n) -f7l0(2. n-sy^RHc, SiatJilfSIEcoB 
WT\ n-^/iit, *-AfifiW-v\*£8J5i.ra-& 

[00 38] PPP IP Configuration Protocol (PPP IP 

t=*fLTlPTh'U^Srtta^-Sfc«)fc:fflv^^4. IP C 
onfiguration Protocol (IPCP) £#M£<r t T\ xy 
FyxrAti. li^|^<mvfihj&v>lP7KU;*£18 

[0039] ±a!C7)i d *-A7 F I^X{i^ffl-li- 
•f. ft^O^ffijt-ftS^User-Nameffil^ffiffl^-S^ 

ii. *m\tfimniPbm%&-r><tfffl9Ki > h. tit* 
pppxy f yxfA 1 0)ffim?0)mm i i> o t -awt t 

^^ti. User-Nane«ti«rfc-?\ ^*-A7Hl/ 
xc?)*£f#oxy H yXfA tihK- F T*# J: o l/Zffl. 
^th^bt^thtih. Z0)t%-&, V— \lxuj<4 ¥ 
IPCPT F 0 ST 7 x-XOlHCX y F 
y Xf AO*-A TYUXb n— 0)\ PT h* £»J 0 3 

*-A7 Fl/7. i: IPCPlzJ: oTf] 0 ST ^itS IP7 

[004 0] ^CSfiac, att^6 4hxyKy 



^Afr4><^7U y^tCioTilfSir:/.*'? 
8 0jWBbK§*U Z0)mm-7**>v b7-?80li t X 
y Ha-f 7? tX^)fcftOT7 'J , *J"5r<fct>— 
ocOStt^ (Witf. Stft^6 4) , tJilA*flfi^3&»^> 
MSC4 0 (02) \,Z\ftfro'ytc<t%>—?0)>^y?*- 
)V*vW—7 132C7)3 8) 0IR 

[004 1] 1 . T^-fe^-K-f y Mgflg (Acess point 
function) . 7?-fe7.*M y F8 2«, MA0l7*'J ?y 
y?\ Jfetf fc. MAC® 0)T V yx-y 3 y b TlV yX 
-S'ay^aSfciifcfTtS. 7^-bXWyMi 7'u 

&ftlsl& (ASIC) ct)^) , iBA^ij^ (#i 
L < tt/r- F±?M —9-* -y h 'J V7hh\ ^iASI Cp^tZ 

feivryx^^-i-^. iwyftcxyKyxfA 

7. 8. 1 l^BJcogp^^#SS$ix/iV\ 
[0042] 77t^yh (AP) X7'jy^*> 
^MACH^7lx-A^^(tK0, in4>Srftl«VN7*fc:ilS 
II . * S ^ {iiftCtelSl^ \7> ^ 0) 7 V - A $r x 7 'J y ? 

(jyKyXfA) tiMfi-rs. MACHcoryyx-y 

aykfr/yi-ygy^ll APtCtoT, xy 
F y^xA^MACT H UX0) D X h S #^0MACT K 1^^. 
7^^^7 u -7>P^^IS^-r-?>fci6tCfflV^fL|>. AP 

Ji. xy KyxrA^ft^oTMACJfy' 1 ; -yyy^^ii 

C\0)b%, MACTHy7.^@#c0MACTFl/X 

^it^>„ r^-fe^-K-f yhiy -eiti:wa-ri.ii^/N7' 

14, AMW(C{4. (5j-fiMtcffig$iiS 0 7^tx^ 
yh(i, *i*»*^fc:tJV%Ttt, mtiE|SA7X(7) 
^-F<0ffMS:IR§. M > b§m^7'i)m—0)^^h 
rt£|SMftMfc:BjMi&%£\ IEEE 802. 3U 

^^LTS^fc»a§iiS. LtfLtf, Ty*^7.,-K 

•^yF«, ^ii^y^^giLTa^fL, ^w\m0)Y7 
Lxmmztit. Wb.0)*i9?fr >vi-t7?* 

)V0)i§&, ffl&.0)T?*XX4yVtfm\^tl. 
?lzlitfmr)%Xt>tL&. 

[0043] 2 . %ms\7"fflLM (Wireless hub functio 
n) . to|lyN7'8 4{4. 7t-'jyx-yiyh (FA) 

^mz. A' 7 ^^tiw^yyyy (maimm. 

yy^\ *Jj:l^xtunnel#a#*j8^4. -f-fXp^ 

* (qos) ^*f-ri»^-h^§fLTv^^{i. m 
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-7±Txtunnel 7°a h y Vth Z b £ J; -?T , Q 

h^-^a. AMW^a. #-oiEH^ 

[00 44] MW^lt. -o^J>&ua 
»r^w^yh^'jy? (*f2L<fa#-r-' 

h7*--?"/h. 7U-&VU-7 

amy*--?-; Ff<?)KlU7*-7 7 HC7*- 

^ml^s, ign^yrn-b-y-^-fi:, mzmmzmw 

09. io. i lcDimco&ftzmmztifz^. 
[0045] mnmosmte. i^t^at^jut- 

1. P-^^APT-^f-r^f-V (Local AP architectur 
e) . \3-#ll>?PT-*T71- J r<0i§&te. T7-tX# 
A ^M***ft (ftMWt(S2kmm±) CDUy : JZft 

KM^iis (04) . Tf-txtfjyhii. mm^y'iz 
ieee wi.-s^'vvv-tzm^xmwtth^bio. mm 

'\7W<-y77U-y[*ttzW.mizmLjktsZbi>. fo%> 

wmm^yizm~ifr<7)immffi inta* ^a—f 

-eta. m~<mm*m^&h<Dkm.'fcth a h 
\itt~mmz-fhzth , mm^yizmfkcDTf-tx 

myht*7?<lt%titzTy^1-$:1nlZ>ZkT-t7 
?lt?Z>c\ti>X'£&. 

[0046] 2. U^-hAPT-^x?^ (Remote A 
P architecture) „ *J^— bfiPT— %7"?i~*r 

ta. 7^tx^yMi iS^ti. ^ffK/J^&i^y 

la. fcR/^a^rafvc (art*«v^aawc) ies$ 
v*~bT?-tx#A ybit. jjjL<ii ti& 
s t mum b ? y ? zm^x . *$£y > y^amt h &v 

VAblzVymtih. *.)V*TA bfrh\t. mtmz 

? Tb-ivfoh WivA 9 njfeil y? 
^T. MSCrt<^)IWFtC««$n&. U ; E-hAPi:*|||y\7' 

*y?iz*tLx*2»- (£*&r*itt) &£ua-fc??-fL$ 
ftftis&^WfiJfflSixs . 'J^-h7^tx^ y 
h 5 y*y?cr)tzit)<?>TsU xia, m& l < it. 
$m'\7tffi-&m< l zWm.L. ZtUZlWE 802.3*>y h 

y-rzm^xmm-t&fr. b&wt. mmzmm^y 



tbcr>T/<A xit. £M. b5y?wbW£ti&. 

[0047] 3. ?i-£MAP7-*T?f-* (Mixed AP a 
rchitecture) . M-o-SAPT— dfT^f-V^^ti, * 

7.,-JM y r- SrlhK— h-tS^^'feS . *-;!/7 4*jy 
^ flU^^*±^)iI*(3j: OIWRWUt- h7?-tr7. 
#4 * h fcfc#*.&*iS. strata at. 

U h AP(i*^y sy 'iznh h Wi$m b 5 y 7 ^ffll •> 

xmmztih. 

[0048] 05ti. o-*ykAPtf)**fflV^3o^)-b 

mimwzm-&mzMwztL. sv^802.3u y ^ £ 

[0049] 06(i. Ut-hT^-fe^^yh82* t 

»nt*8 4 tciiia h 9y^ 8 6 *fflv^r«»snsr 

-<yh86(a, V*:-h-?4 7uT7-tXtfA yh82 
(0Bt'(iR-AP) /\c7)^M y h - >y»7 • -?;l/f^yh 

mm7i/*vy?zim-f&o u^-br^-tx^A y 

Hi. xyFyXf^i:»LTX7 l jy^t-t^m 

ffi-rs. mw^yt b7y?T7-txm y biimmm 
mzm-®.mzmwzti. soz.3v y? zftixmnz 
mmztiz. zcommut. zt>iz^ ^yb ■ v*? ■ 
y mi u y^ ixmw^izmwiztih v ^e- 

r-T^-bX^yh8 2Rt^$ill). f^t^S^U* 
X'iibyy^ mM^ bZtL%\>\ 
[0050] i^cO^r^-byl/T-^r^^^. fcit/ 

S ^ r^T^-bx^f^ y h £V#-b1-&t:tbtz* -y 

[005 1 ] 1 . T^-teX.IM y h(iMAC«7"'J y i^fc 
LT«flfrrS. 'Jt-h7^^^yMi. xyKy 
^fA^X7'Jy?i:W4 b^CDMI&fo&Wm 

b?y?t cr>ffl<7)Mcrv v ityyzmfr-fh . n-^? 

)VT7*:X-#Ayb\i.^ iyFyXfA^X7 l Jy^ 

t*^^7't^c7)MAcy'j •y5y"y7'&3Mfr&. 

2. b7y?r?-tx#A ybiiWaayv vfbLx 

3. mi&\7'ii£x<Dm--Gi.mzmw.ztitzMC7'v >y 

^rm^yh) (cftb(i802. v)y?zm^xi% 

[0052] MIX. nbyy?-km7Lhu-i)}VT7 
■txXA y b$> h \>m V h T 7*.xi$A y blfWfr ^ 

1. u-t)VT7*iXKAyb\i., mW^tm-tiLW. 
l=ieML. ;<ifc#>f y h ■ w ■ #A yh802.3'J y 
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7 foh ^(i*W802. 3* -y h 7-7 Srfflvvc««t* . 

jf7U •y^>^i^3«fT'#=5rV^. &£t^±*|ge 
W&MA017'J >y >>>^T1i^*Wri» k&htlh 

[00 5 3] 2. *77-ffc«, *.iV*TA blZT7-£7# 

HT7 -fe*;M y h *ifc#77 VM: 

T, T?-tAX4 yyaMhCTYlsX? 4 7> 

\izm^tih„ mw^imcTVi/^-z/Bymmiz 

ACT H uxy 4 )Wr-yMzinz. hti&« 
[0054] 4 . *-'J yx-y'i y h 

te77^7.d?4yh#>£tf)7y-A£MSC IHF£|tgff 
t\ *4V^i»fc:MSC W#^07y--.AS;77-<r7;tf 
•^yhWItt, xtunnel7°nh3/U£ffl^'C4i|&-f 

5. MAC7Fy77 ^7r-77l^£ffl^T. ^OMAC7 
h'yX#X-7;l^£^L&VV3--.#— ^.hMACT- 

y-AtowtteMAC7 H1/X7 4 )Wr—~f)\0yft% 

tmm<mz*mt&. 

[00 5 5] 5. a-tiJUTf^ATtW yhiilPhyt 
»>7*W&^7'liZ)V—'f4 y^-TS^tCARP^fflV^TM 

P£fflWCipn7-. 7 h£77-b7;K4 yhlZjU-hi- 
h„ T9*.Xi&A y h«9*-y h7-7<§mcDtztblZWP/ 
IP£ffl^&. 

6. TlS-^LT^S^U^-hr^-fex^yh 

7 . J\y H*7fc:*«-eiWf- hKJit A>f /HPif as 
[00 5 6] MBhyytt Y7y7M*m^h*>VT 

-*"r?i-vx'imTcD®mt,zm ■. 

1. h5^7?W>fyHl »yi^7i:|5|-fiia 
fcffig$*U £*lfciK'f yb ■ 77 ■ #4 y F802.3>J 
y7£ffl^Tt£$g$*II>. £*Ui, MAC7P-AC0^- 
y7Zffimz?&tzMZ?i%frtlh. *3f802.3* 
7h7-?th5 y 7 77*7.;^ y h #MAC7 U >y y* 

[00 5 7] 2. aiKh?y?<0-fe?*'ffcttHr;Hf'f h 



fc h 7 y 7 77 -fe y h Sr-b 7 ^fcShfc 7 y rT 

3. A-.y7^-;Hr7 7P B lco^yK^7{i ; eAW;HPS 

Wt ff 3 . -y 7 *-;H? 7 7 fc*f LT AftS^ 

-ffr&m-th 7*-v yi-y'i y h*«fiqtrs . 

4. h7y7AP(i, MACStfcff&xy HyXfAWr 
y yx-y 3 y fc;\y H^f 7^Wi£ \z%H--$ h-Stmttt: 
\\ Z\tlh<mkCTYV77 4 )l?y— 7Mi. xyh* 
y^fA*>'*7 F V - 7 lc^$i7 h t n 7'fc <fc 
IWty;:7°n7'7A§;fi&. MACTHyT.7 ;U7t-7 
^Srffl^Txx^-xhMAC7y-A^*§ill.. 7 
a-K*^*hMAC7y-A&6^te£H/s-7-<y F££ 
tfMAC7U-AfcOV^TIi»(Cili*t4 <I ttfgfZtl 
4. 

[00 58] 5. h7 77AP{i: N IPh7t -y 7£&s£8/n 
T'te/l^—r 4 y^-f &fctf>tCARP£ffl^TMAC7 Hl/^W 
»&£ff&3. K^fttctttvtii, iilI^7'(iARP^ 
ffl^TIP^^-y h^h^y^AP^-h-TS. UDP/W 
h7y7AP^ y h7-^«H£fflV^n«. 

[00 59] 6. #— asHh^y^-fe^tet^vcii, 
MAcryyx-y 3 yi:, — oiOT7-fe7^yh7y^ 
WW7^7XAyy<\<n)\yY* 7{i, MACB&fflv^ 
Tff^o, Ciix4.MACl#^#S:fflv^Txyh'y^rA 
*«r^-bxdf>f yhtrai#{t4>*tS. xyFyXfA 
# — 3t0T7-fe7^-f yhA^siJcoT7-fe7^ y biz 

®m-f&t. r7•fe7^y^(iMAD^y^'?^-77°^^ 

3^2rfflV @#C0MACT H y 7. 7 4 )V 7 -f— 7*;U*jg 

*r-f*. -fe^-f h<7)Bir^*IS^7>\ T7-fex*f-fy 

fcli. MACJf/\yK^77'y-fe-y'(7)4'^ (ZtLlZT? 
-b7^M y h{4Eti(CMAC®^31 tTSVHCjift-fS- 
tlitl^v ^titbX'fo h ) . MACii^fife it/Vsy h'Tf 
7fc^&xyF^7x-rAtf)f2aE. *>J;tA*r7-fe7.^ 
y hcoMACT Hyx7 ^;P7 f— 7*;p«ojeK*«^-i it 

[0060] 7. *E^h^y7-b77t^^7^-'J 

yx->>i y y— ASr-eco h 7 y 7AP^4>Msct 

#> S V ^{i Z. <^)ifi*-|6l fcxtunnel T o h 3 ;P Srffl «f« 

z<7>tz*b. b^y^mzn-t &7*- 

Uyx-^ x yh«i s ^-coillS h 7 y 7 -fe 7 7 F*lT7)x 
y H y7xAcOT7-b7,-K-f y h Lr «ffiB«jBjai 

T'9'Jy7^r^cfc^T{i, ^c7>7^--'jyx 
-y'xyMt ^>M)V\Vby*)V-frh<r)7V- 
^M^tcYyyfknzWkthnfrX'fo*) . Z\cr)h7 
y?AP#MACl7*'J •yi/y?'£m^XZtlt>7U-J*$; 

a' y 7 *-;Hr 7 7 $ it^T « U ^ - h r 
7-fex^yhtjMffri.. Kfc, ^ix^>'J ; E-hT7 
•feJUM 7 hA^i#C0MACT YVX7 4 )V77—7)V^ 
W^. IS*^So'V>T, ^-<50MAC7y-A5rT7-fe7^ 
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±W>XoiZ. MAC7KUX7 4>V?T-7MiM: 

«mt:ie*s*i&. ao^fflfcfcwtH:. mac7^-a 

{ 2 'J * - b T 7 -fe x #4 y b iz <£ r> X «y 7 * - ; V 7 U 
•/ytCKSISfl. A-y^^-^yj •vi/tfZ.tlt.ZmU 
/ N7"[*) (?) 7 ^ - U y x- y x y h (C802 . 3 u y ^ 2r ffl ^ 

[006 1] 8. IPA^y bZVt-hTf-tXXJ V 

b izmmh zwiz tifr^mt&tztb \,zmm i ^ 
y*-hr^-fex^yhc7)MAcrHi/x^ffl^T^ 

$ill>. 77-fe7.;tMyb?)* y b7-7* y b7-7 

H^-7^'yfe-^UiUDP/IP5rfflV'>|,. -te/kifM bfl?) 
I EEE 802 . 3 'J y 7 { 2 J; D SjI ^ 'J V 7 1 3£8W" &Z.th 

[00 6 2] 117(2. n-^/l/T^-fex^ybwa 

y^Sr^-r. ZCDXf-yfCDK-MZitmm 
SPHY^ft-fSo «WIPHYi2. f-^xyFy^f 

A^raT-^i&l>u{2Sfi^&. .i:ri£>f-'-7(27. b 
y - a ctf- ? ^iiilSltc^ fi^> s t ^2fgtfl§§^ gft 
§til>. AP^'xyb'i/7.rAA^cOT-^^^ilS:ji 

tTSftL-t^(i. APf2. ,I:fl£MAC7l/-A (MAC 
/f ) tCTy^"-y^-f-l>. ic7)MAC7y-A{i, 
— f*y h»Ul7*-7-y b (IEEE 802.37 *--?-y 

b) tcS^°-y^$a. -f— f*>y byy7£:0LT*ll 

b'jy? (oio. Wiy y7) £:frLT»lLfc#& 

J2. APJ2, W-^^f^ T7? -feX^IJffll (MAC) 

[0063] H8^*3V^T{5. H7^^-xyH>-Xx 
A^l6j^-3/S>au(i;il*^c7)MACJltPHYJl*\ 
*M fWb?>?£ttt& O^-bT-P-txm yb 
cOMACJitPHYJIfcS^ill,. Tlhy y^±-cn, ftt 
L<(2. A/fU\;l,f-^yy^7nbnyl/ (high lev 
el data link protocol. HDLC7°n b 3/l^) 

H9f2. ;\V7*-;l'hxyb'77-ir7.;tMyb'\cD 
b7y7 £7y -y S^-iiai'NTWn b n;kX7 >y 7 

y^-hAP^h^y^tiU^-br^-fex^ 

bAP^\CO«lb7y^£7)MACjltPHYii(i. ■ V 

•7 ■ -?)V^tM y\>vy?*w&L. -mbyyttf 

m~ fe 7 7 n<rmm.<^> y b ap^ iift-r i. /s*> tfflv > 

[00 64] *EHys7(iU^_hAP^b7y^i:^ y 



h7-7w^;^i-fey^ (msc) 

^ (UUtf. T1&&W2T3) •y^'-rs. 4Sll^7 

|*|<7)7°n b 3 7 y 7 J2 . MSC^MACJf t PHY® £ H 
51 U >IC7)±gP^(i:IP (Internet Protocol) Jf^H^ 
Ztl. §^>(CCC7)±gP{C(i^ y bV-^^I<^/L'V)C7)UD 
P (Universal Datagram Protocol ) H^HiSc^ft. (IPJ1 
tUDPJSiim^h-tXm/lPtmftlh) . %t>l,ZZ. 
0±g?H(iCTunnel7°0 b3;^^J|$ill>. XTunnel7' 
ob3;l/{ifrfc&7*-v y b-e&O . t^$iiTv^ 

IETF Mobile IPS^f^H^ Level 2 Tunnel Protocol 
(L2TP) COmWwmifZ'kt!, XTunnel7°nb3;m. 

7$>h^\m-* y b7-i?rto-f yf-v-^y/m 

ffi (IWF) racOjiffc7)^A6tfflV^fLS„ 
[0065] HI Otiy^-bT^-b^.^ y bSr-9"^ 

•y^Sr^-T. ^^yi/-^(C(i. ys-y^7^-;l//\c7)-f 
y^7x-X (*EH^7i:LT^-r) t y^-bAP^vcT) 

-fy^7x-^. ( b^y^APhLr^-T) t^tfih. 
m%^7cowifi.frt>iz, (mitmio^-t) vyy 
9 mt. mmizii, mn.zm-twz.ot.zmhmo. » 

^L<ii. »l!!iic7)7°ab3;px^ y^(i. mW^7t 

b?y? mzftm § n „ z com* 4 — 9-* -y b t i 0 t 

t^$tl^. NMc0^7?fr^f£&m%h7y7<7>*%£ 
{i. -fe;kiM brtONfli(50*$lb7y^APi: H@c7;aK|| 

[0066] HI lten-^bAP^fflv^-fe^T-^-r 
^f-v<7)*ti!l^<7)7°obr3^x^ y^$-^-r. yi^-li 

LXm-t) fcxybvXxA^\oxryy^-<y^7x 

-X (APfc LX^-f ) tf-SttiZ,. mW^7'nM&frt> 
I*. (08 2:111 lt^-T) APti. Hf^Will8^-r 

b^y^AP^jta^ii^a^ ttit<ii. mmmw 

oh3;W^7?!t *^^7i: b^yi/APt^SiJ^ 

ztititfj— *r*-y bi,zx-oxmm^tii. nho 

2: lH^*ll^7Wfi-r«). 
[0067] Si^*^MSCA,c7)yN'.y ? y b 7 

1 . Z<?)*-y b7-^(iIPr-^^7ASr»t^i:MSC 

tvmxiv-T-j yy^-hm)*^* 

2. ZCD*>yb 1 7-7l*-t* J .VT<X$>&. Ztlli, 

y?-* y bT\i&\\ Z<?)* y b7-^7(ixy 
b"sX^Acohytv7£mm-t&?ztf)CO?>-X%<. fg 

II. TtvyTjy?'. mi, &£Wgmb7h-y7i> 
mm-t&tzMz. fmztitz ( h^xbztiti) y-H 

frt>CO h y t -y ? CO* -y b 7-^±tCAI> <1 1 

[0 068] ASWSrTT-y^-^gytfcv^li-f- 
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JiMSCfciim-rSfcfttc. JSlT^y y?7 
x-X F"fl> : 

1 . SflfiJmJi. IP over PPP with HDLC link (IETFg 

2. mi$Js>l±^ IP over frame relay (IETF^I) £T1 

*. 

3. S&Jikt IP over AAL5/ATM (IETFUig) £T1 »jy 
[0 0 6 9] ±3£^4 y?7x-X(2£TIETFil^<7)# 

;w^yn-;^'y by-fcDymo y?£*wi> 

[0070] MACl<7)_hgBcr>xy F y^A^H^M^ 
F . mT^ittTOiMACigcOBlf «0x y F 

[00 7 1] xyF'y*xAte^t*X£;£a6T*-A 
*-y h7- ^*^^>l>V>(i7^ — Uy^- y 

Siirt^t-'jyx-i/'xyh (FA) Srfflvvc. a 
&ff>i±\h0)* y F v-'?'\cDl%Wt#'i y h . 
b?*<7)*§£\ F/WixyFv-^f-AtfO^-A^ y F7-? 

yXfA(0*-A*7 F>7— ?F*KDIWF£Ty#-;JM 
yh (oiO. &W}LXi>*>yis3y*mtX$&g.Ztl 

A*** - Mz h , A I WFjWtiffcxtunne 1 7°n 
ha/l'fcrtLTfcSfl^KftaSii*. xyFyxrA 
#7 * - U y £n - 5 y ^ L T v \* *§^-{i. 7 * - y y 
*y F 7-?fiO^-t>^IWF#*-AIWFt I -4 y 
*7x-x£illyT«tt§*i.&. +r-h'y^ - iWF(iS% 

Zb MIO^-Atefc£^-t^Tn;sw 
If. lSP*4^{±^R>f yh5*7 F) Cio-CBftrti 

7 * - »J yx- y x y F fcS Si*-*-* i £ fc & 

4. tztzl. m-mwtmy—'W^Wi^Tm^t* 



tl h . *rfc SrFA 1 WF t 0)19 fcfrfc Srxtunne 1 36«4fig § 
*L 7 *- y yi-yi y F k IFW fc <r>f^\m 
Oxtunnel{±Bfk£il&. 

[0072] HI 2(i, 20C7)XyFyx-fAA N Bfc 
*frf£;<9*-y F"7— ?<?5!B— (rjy7^=¥il^ 
-ygy) ' dix^xy h'yXf^ 

M^^-Aten^ . y f v-nmmv- f^7'aAw 

^'A (WSP-A) TftS. -t{OxyFyXfAfi*-A 
*H * -y F V - ? L . {Wcox y F y X r A « 

7*-U yte§g*>y F^-y^^gf^-fl,. WSP-Af*]?) 

*-a i wiffiftcox. y f y x-f a fc^f-r § r y ii 

y F i: LTMB&fS . ^xyFyXfAtovi 
T, T-^{S*-^IWFtcfiK§^4. *-AIWF{iISP- 
Afc:J:oT0f*rSit4'f y^-*>y F-t-t'xrn/sM 
^<OPPPfcSSHW I. z\Z Tit . ffiWwx y F yx fA 

8fl^ISPfc:JnALT^**&tt, ^-AIWFtiS'JOISP^ 

[0073] %m.y-—t'Z'7vvU Vm-y FV-^PM 
»tC*JV^TIi, mimt IWF^ia-CWr-^lixtunnelT* 
n F a^^ffl^TiBf . iWFfcPPPHf-ys-oraTCliT 
— ^{iLevel 2 Tunneling Protocol (L2TP) SrfflV>T3l 
tfil*. -^-b'y^IWFt^-AIWFfccO^-Cti. f-9 
(il-xtunnelTn F Z^Zm^XMiitLl . 

[00 74] A*«y F7-7pV)IWF£JH^6 

larf-^ *4>«-r& -r t jwe«(c=sr&i t t*s . ft 

#kLT. -9--t'y^"iWF^J;oTxyFyxxA<7)iSP 
/-f yF^^-y Ftc«a-t*fc*fcjgf®>§iiS^-C<0 
flWRfclf- b'y i/I WFfcjMfi L , -9"- h'y/I WF^'T^ 

yx -f yymk* v 7>v?4mzt*-j»* y f 7-^ 

rtcor^^yr^ y^-9--^'^jH0ji-r^t)#t^ix 

h. zcommmmtek'owmTh&w. 

>goT 4>at^4«e®tt**fls«sn&fc«>fc:3ai*tiii < * 
4. 

[0075] PHi-tf , y^=/*^#?gfcn- 5 y^-TI. 

X7°n;svf ^*ffl^T«»t4*>^i:«J&t4. c\<T>% 
m-vffif&Tl*. Ty*-X4 yFfiy^^o* 
-AIWF fc 7x 0 , it^f- ^ ^#?Sk y^ a' 0 PhIT'* 
^4 <i k tf'Xmt =5r 4 . y^ r?"rt<7)*-.£ iWF(i y ^ 
lf«lPSfe:«iW*. ;*ifc*t!yTSC:tf>« 

xy F-yx-f AOi— nz\&w&n<?>\swm 

T'S(;4'ffi-rs^(i^<^l», SflZOfffjftTI^ +>-- 
h'y^IWFj^'Ty^-i: LTStgL. -T-ty/IKFiix 

y F'yxxA^SftL^^-C't-fe y y 3 ySriitT^ 
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3£Zti%\,\ fc£U FA<yM5S«:xyFyXTA##?t 

C00 7 6] HI 3 li. m-W^-y F7-?ff)&£^ 

A*-y hy-^teWSP-AT*!)., XyFy^fAAIl 
*-A^-y hV-^*^S#IL, *-AIWF£7y#- 
;}MyFi:tyTffl<<\ £tz. ISP-A£ISPC9PPP-'/--A£- 
fflWCifgrfS. iyKyXfAB^Ii WSP-BC07 

t-'jy*7 F7-?^£>g££U -»/--t"yxiwF£ffl 

Wtt&bb Uc. xyKyXf A£lSPk:lSPc7)PPP 
AB<7)T-?(i7*-'jy*y h7-^i*-A^7 F 
[0077] ^mi£#«t^§*:W::<i, *-Ai; 7 

*- o ycommv- txyvsu mmzv- s yx-£ 

n&fo&<?>?t-T%< , 7 *- 0 y*E||-^-f X7-aAW 

# t'y' ft^-I i: IdraiT, #*gft<0WS P 
#\ xyKy^fA (x— if ) c?)Chcago ISPt^t, 
^fgF'WChcago ISPWP-tf-AtcTy'-feX-rS^ i; C 
PW-&tS/*x-&*fci*oj&\ ft^v^i, x— fochca 
go ISPttfora^n- 5 yXCWf S tV*.X-&S£J3r? 
#«rtfcffi1trSflfi<!0lSPi:<iDiafc:hV*x-&S&fifO 
JniT. #^irtc7)WSP(i. x— >f<7) 

HE. Ttvy-f-jy?* MM%hy*)Mm%.m£M 
ft^&ftMzzix^u-syym&ZMmzmiX'* 
Z>c\bZ&3<ZixZ>. 

[0078] -fy^-*7h^y75Xh7^f J pfl 

fcfts-fsat^&rfes* 1 . ietf (4y*-*>yhimm 
mitmm&) iz&^x. m^w^zztih-kx^i- 
vxizttLxmfe-r&tx'iz^ timwfitp/pits. 

A*-y b*7-7\*lc?>lWtfmzTy#-}!ib LTfflV^ 
WMbZtih. fcrtfU A y?-*y ho-syy'ts 

[007 9]xyKy^fA(l PPP£H!ttLr-*£ 

Ic. FAOHai:eifc07x-Xt;AS„ dii£>7x-X 
SriitTxy HS/X?.&0<BlE3*u iit-t'77n 

y Hv^-f AliPPP^BBi&^-s. iiitii. PPP'J>"y*i£ 
S7x-X, PPPfME7x-X, fcit/PPP^ y F7-? 



*iJ«iXoh3;i/7x-X*<*4it4. i^£/C,rfi<s>7 
x -X^J-f S i: . x y F yT. t\M4PPP£ Jfll IP 
/ 7^ mrti i i: *ranffifc ft § . 
[0080] OT<9ittHJ!fc*it veto, H yArA^ 
7 *- u y £a- 5 y XLTfc 0 » 7 * - V y* >y F 7 
-?#»£>S$8rrSitf>fc£S£tS. FAfSjl7x-X£;fc 
we. xvFyXfAU ( ia-^x— tfSiJx-y'x y 
FSrjItT) 7=r- uyx-y x yh*^^rhv\'^^ 
X* y FSrStiTtS . x— fSlJx-y'x y F {i#jfic7> 
7jr-'jyx-iyxyhfcJ:-?Tjl^i$nJtTH>'N'^>f 

X^yh^7t-y (advertisement messages) Srfflv'* 

x. m&ixtwH7>wmM?ib. a»7x-xttj 

ot. xyFy7.xA^-ifg$ix-i/ x yb{i. fa 

xyFtLT^igt, ;«ti'jmhJ7t-yy 
ttt-^ (7*-y ywsPi%DSilH/--A) fcteiu-r 
£ . 7 *- U ya«W-^'«. x— tf'aiix-sy'x y F 

W'Jm FrtOUser-NameflairfflV^r , xyKyXf 
ACO*— A^y h7-y-$-|i^^ .I^IfiJ^XXF 

fcigjU-ri, . *~AS^-A*{i 7*-U ySif-^-y n' 
HioT^^ii/iS^U^xxhSrgfi^-Si:. 7^- 

- y y®f*-f-/N'<7)iisijhxy k yxxAonsij^isiE 
2r^fft^. f2KfcS»#j«:0rfSfc. *-Afiit-A' 

(i*— A^«y W—tPWlWZffliRL. ^-AIWFi; 
( 7 * — U yWSP|*|<7) ) -9-- t>XlWF OHtCl-xtunne 

lyy^^^-ts. ^-A^-y hv-^i*icoiwF{i N i 

WPPt -y^a ySriit Tl^teT y#-At LTSS&t 

[0081 ] V^^t-tVHP (mobile IP) cOfgiE 
feilffift^x-X^jftT-f Si: , ««ftPPP7x-X 
itfffli&SiiS. PPPtf5BM&^ffc. *-AIWFi:S3}<§ii^ 
ISPX-f y h -y FPPP-t-ys'h ^BltLZTPSStt**^ 
ZtiZ>« PPPlMiE7x-Xtt>v^:i±. PPP^^y— H*« 
PAP^Sv^iCHAPSrfflurX^^^x. iSPfe&iifcM y h 
5^>y hPPP^-^'ti^g^xy KyxrAc7)ti«iJc7)I2 

[0082] v^f^CfL^'^-ri, N PPP^.y h7 

- J? W7 x -X)WittS*l* . i (0 7 x -XtCtJ V VC 
14, IPTHU^IjffllS^ IPT Fyx^T>PP1f-A(c 
i^Txyh'^rA^MOi-C^ TCP/IP^ 

XyKy^fAll i^OISPftSV^i^'f yh7* 
•y FttfOlST'IP^^-y h*PPP*fflv^TjSS^6i fc*< 

[0083] I2SE^ 2 misKiVX'Wrr Ztl&Z b IZ& 
Mt&. *:-t"MPcr>mmztS\,iXI,Z. xyKv-XfA 
^tlS'J* { * - A * •/ F 7 - ? PV) ^ - Aglt+r -y fc It 
7t-'jy*7 F7-y-oi^iJi:*- 



(22) 



nm^F 1 1-284666 



A*v Yy-?<?>mWm^z)AMZixZ>. zvm& 

XTAOSHU^X^hSr. miii. IETE RadiusTn 
F n/F&ffl^T g#c0o-;7;UMSC|*)c7)7 *- U y^lt 
-9"— /s'tCRadius Aceess-Requesf\°7"'y YiZAtlXMH 

y*-V vm^-J Mix y f yxf act) f ^ y 
-Ag$£-tf--A^!iSij£$£U RadiusftSIi: ITK 

y^fl:-?-/ Wx y F ^XxAcOtF-a *-vY r 7-9<7) 

mizmfexz^m^i. 7 *- y ym^r-^t. 

itri/BytLX, Radius U7X7.F£, 7*v-%cr>£ 

dizm&i'&miiv-^ (mm. mmv-t'xrrui 

Ztl>XZZ>. Zco^ii. Z<7)7u-ttfith^X. 
Rad ius Aceess-Request £ S£*£fl3r * — A®if-tf— ; N't 
ic7) D -x?;i^0^_ys>\ -?-c7)SSg!'Jy*X7.F 

yFcogfiyy-xxF U 7*-'j>x- 

^'x y F#xy h v-xxAc^aii »j ?xx f S:t§ie-r 

fte/j. ^-Agif^-AkL Radius Access-Reques 

T&nmwz^x&wjizmzmfti-z, . issEi: ®$i 

#l£?/rtl>£:. ^-A^ff^-A^ Radius Access-Re 
spoused N'T" >y F £ 7 * - U y JWW 0 £ L . <X 

iz. 7t~'J ySfl^-A#je?g:£7 *-'J yi-y'i 
yFfci*9. d LTs 77yFh'j77(-I)^ 
T-fl>. SllU^xxhfi, *-A-7--yW^/b^co 

[00 84] m~0^;Hc!2IE»^c*3V^(4, xy 
F i/X y-AcnmSW-i y Y 5 * -y F £> £ V ->li I SPcOPPP-tf- 
-A'i Jtic^iiS t th'ijf -( tgtffi: {SSW^PPPfgiE 

wmizmmts z tMmz^h „ 

[00 8 51014(4. n-5y^xyFy7fACM 

•f^m^-dry^^-n^mxhh . ppp-9--a*: 

*-AIWF(i|B)— 9--A'^^{J®L. L2TP(i^^^t 

x^y/S-^-ri.^^^iii.r^^yT'f y^ 
-$~&tcisb$5£ yx y h y t. ^ Acofisy isii-r s £#>co 

r >r F 9 Y 0 t-A'ioj^Cot vr i *3 ft* . 

u r^^yr^y^ df-tf*7*uK-r*T« 

[0086] xy Ki/X^AcOJ.— tf®#fx-yx y F 
^cOMAOf^-y-t-y' (j^Rtf. 802. lit"- 3 y) t,Z 
X-oX. Agent Solicitation#gH$&§;h..g>. MACgcO^ 
•y -b- y"ii. US ZWimtt ■§> fctf>fcjj*§*iT ^ 



[0087] Hl4»tctdC ft*Jt, XVh'yX 

fA (^eaw/F) 1fiTY^94X*yY*m%L. 7* 
- "J yx- y' x y h #r FA? -i X* y h Sr 3M 0 ii-t . 
xy h isXT~M$. i cor Fv s ? -f y b #>4> 7 * - 

yx-yi >vwm?h* 7 h y-^ tn-rsflt 

as. Cc7)fp8fc{i s ^^-uyx-yxyhcomwt 
THU^fc*4fL*. Z\ZXcr>mmz&^XlZ. Z\(7)* 

v v v-9 i&7 * - 1» y^n-7-- txrw ^Tfc 2, 
x-y'iy^ 7t-'jyx- y'iyhi:W.y h 

v-tizmt&mm (&ft«T hp* s-siiu 

^x^htffl^Aii. i co® It 'J?xxh&7*-'jy 
x-jyxyhtcjii,. dco^^-'^yx-v-'xyhti. 
fta (TQ^fy) tgx-y'xy NfcLt«IEL, §ii 

■t&t. 7*- yyaiHN-^. ^cou^xxb^ 

-Af -f V 9 hl> Tli^rv ^ i: £fgH$ L. 7*-'jyf 
4\s7hW—rtlzT?-kA-t&. 7*-Vy^r <V9 

v u -9--^ n*(4 7 * — u y*|g-»f- h'xrw u y<DFw 
(7*-vyv*4 y?ju?hV) &m^x. 
m 0 9 xx Y ^xy F yX7-&j)<m-fZ>mWtV-t'X7° 
ujU ^cD^-AS^-A'fch'coJ: a £ LT 

*- vv&m-^iizmiom-. mz, 7*-v>&» 

-9--yN*(i s xyFyxfAcoaH y ?ix F ^RadiusT 

XT-tMt Ltz V 9 xx Y % s -f-coxy F i^Xr-AWW, 
•fhWSft- 7°p aw ^co* - Agfl-tf Mz $>m 
-fh. -f&t, *-J*%my--/V&*-2*7 i <(U9YV 
t-A'CT^-b^l, *-if-( F Ul)-— A(i N ^ 
-AS$*-»f-y\"cOHDD&fflV^T^< i: 1 7 =r-'J yV 

-\zxy°uju nz-o^xmmmmzm^. zti** 
-j±%By--^izmm-t. ^y^sytLx. ^-a 

mitV-^ii. jDA^cOr-f F-y 7 F , JltZT94zX'f&Z 

tx\ mmtctinx^-t'xruy j jumm (mm. 
tt-^s. ^mfcLT. £xco^-7-<mmzti& 

IWF request ( IhHWJ ^ XX h ) fcigfTf S. *-A 

iwFtPPP^-A-(i*-AT^7yx^y^'-f-/ss-^i) 

Ls Z<F>\k. start IWF response (^J&lflgJJE^) 
(4, Radius access response (RadiusTy'-feT.JisSJiE 

^) -&7*-')ymi*T-mz?kh» mz. y*-yy 

%Mr>T—;V±. start IWF request ( IWFHH46U ?XX 
F) i^-9--fy^iWF^iH,. -9--t"y^iWF(i. V~ 

t'ym7yf-fy/t-^&»L, ZCO'&. star 
t IWF response (M&WIStEg) I £ 7 * - 'J ym£V 

-j<izm 0 7 * - »j ymi^r-^amm^ 7 
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*-y yx->?xyhtjiiO, 7*— yyx— i/xyf- 
[ o o 8 8 ] mz, xy KyxfA^\ y yynmrvi 

r-UVk (link control protocol, LCP) 3 y7 4 3-'jlI/ 
-yayjmh^^ 7*-yyS$i-»/--A£}IL 

^-AIWFhPPPHf-y^CjM^,. fSi:, *-AIWF 
£PPP-t/--y\*{4. lcp^ y 7 a a i/-i/ 3 yStiSJEg 

7*->J>-®$ir9ws;£iiLT, xy Fi^f-Afc 

[0089] mz. xyFyXfAli IBHJiC ;U7 
— Ff21il:7°n (password authentication protoc 

ol. PAP) iSJiy^xx hSrTh-AIWFfcPPP-^-M'^iM 
0. *-AIWFi:PPP-«f-Ay:. PAP5Hgj£?g£xyFS/ 
T-f-A^jg-f. S'liO^ratLT. ISIiE^tfHZchalleng 
e authentication protocol (CHAP) ( MM.W$7°& h 
3/U) Zm^&Zti>XZZ>. Sll^fcftfcPi^rn 
hn/I^ffl^Sdi:^ ,1^7x-Xte7.* y?°i-$>z 

[0O90]^C xyh'yXrAll HSMc, iPay 
7 4 a I/— 1/ a y7°c? h ( IPconf iguration prot 
ocol. IPCP) Sr^-AIWFtPPPHf-yN'tcjMO, tf-AIW 
Ft PPP1fw?JiPCP«B*B®&M 0 JET. x y h yXf 

[009 1] 1 . i--»f*&*&tf>»«B. Zcoisi-V^COT 
Xli. xy K>/;*xA#iB0KPPP£7*i/— *7/Mc» 

PPP*<y h V-^ftJffllTn h 3/1, 

(IPCP) <rm&k. Mzm<. PPPUy^Tnha^ 

[0 0 9 2] 2. mkvy?0y8&. i^s^-y^-iix 

yh'vXfApV^T'AtcioT^aj^ft, tfAK5 
•f AfcttfcSfiS . -fS i: , V 7 h •7X7<D±{jyf £7. 
7 -y 7 *l*W*-&ii*sMfte*U **&«i-1ftcatt$ 

3. 7 *- U yx-y'i V h^SN^Dllfc. ZOi/i- 
■J*«i. lyFyXfArtOTt'^f^ r*'7^^'tJ: 
oT8?aj£fU>. (iBffiWfcfrfcSr) 7*-'jyx-y' 

y 

[00931 4. IWWmWiCDMiko ^Wl 7 *- 

y yx-y £ y h ^<mwfi^hixtz^tmm.mzn 
-x$>&. 

y^Ni, xy Hy7,xArt<?)PPPy7 h'/xr^i-^T 
ffciB § ft . x y y i/x x a<?)PPP k 5 -r / *ic <r <7M§e$# 

il»$*i?>, PPPh'7-f H7-7^Sli^ 



[0 094] xy KS/^f^W-tfX 3^7 4^*1' 
-v-gykte, ^-y h 7-7-9"- t'7.^xy Hi/7. 

tc*r lt3da#^-^- t'7.ro 7 mzwts\ \xw$& 

. i tfO-T- h'TsTn 7 * 7 Mz£ £ ti&m m fcffl wc , 
ilf- 7 -9-- 1'7 £ JnA#fc:f&b ~>X$x9Mtt 
h> ioflNRfcUu xyh'SyXrA^igaE, xyb'yx 
xAcoo- s xyHyXfA^-fyj'-^-yht 
- t'xrn, ywimofSMmtzm v ^ l» * 

n a n »^ffiW^^-7i>^4tLl». JdA^tV 1/7 h 
y^JOX, ^-AM^fyf-f 1/7 h'J (HDD) fc 7 * 

-yyn^w yf^^hu (fdd) fr'n-jy^i 

IEf &fc»Cffl^4>iiS. HDD(i. xy HS/7.T-Ac7)^ 
-A^-y h7-^(Cda^|,ffl$g^1 ; §^L, FDD(4 „ MX 
#3& t lft|8I'tS7*-y y^ y h7-7^P9-tl»Wfg^ 

[0095] HI 5Ji, Ztlt>"r4 1/7 hy*H^>t^ 
•y h7-7T-^T7^-\'tCV>ybry7*§tL> ^tl^^ 
*-A*>4>S#i-f SX y Ki/Xf Afc^ L.TSII«C 
^*Hcfflv>^na*»Sr^t". Xx y7°0ictiV>T, xy 

L . 7 * - 0 yx— yjyb ^7 hv 4 X* y h.Zft 
LTxy H i/Xr-Mz%cr>7 *— y yi-y'i y h^'JS 
h7-7^M-r§ffl#5rf*i^-ri.. ^c07"-7. 

oy VX'foh i> cot &feZti& . x-f y 7 1 ttsv ^ 
t, xy KyXfArtm- fSHx— S/'xyh# s ^ 

3 Lff#^>tL5t7^— 'J yi-y'iyhi:W7 h7 
-^fcH-tSflWRSry^x^hrttcffl^Ati. ^'J? 
xxh5r7^-yyx-i/'xyhtcjnfi-f-^<, xf->y7 ,> 
2izt5^x. y*-v yx- i/'x y h ifi^ ftafi» x- 

y'xybiUs C<oy7X7h£*-A^§^-Afc 

*— AMI-if- b"X7°oy 7* <y)HDD(C 77 -b7.fi> CI 
k-C. ^- ; 5:<ki>!giiEWfg^#-i». 77^y7'4(;:&^ 

*-AS«t-^li. JBA#t^ 1/7 r-'J 

t77-feX-ri»^i:T\ P*ffl^JnA*'9--t'7.rn7 ^ 

^) 7x-y7°5tfc^T. *-AS^JHf-ys# 

7 * - y y x- j/*x y h 1 77 -fe xsiisje^ ^ il 0 ii 
■f. xf776t7(:fcv^, 7^-y yx-i/ x yh 

[0096] H16«. 7*->J y*«y h7-7*^S 

#|f l>xy Fi/7rAtc^rtl.TV 1/7 h y <7)MfflS:^ 
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#7 F > A X* V b Srgff L . 7 * - U yx- y'iy 
F #7 FVs** ^(X^yb^U, xyH yxxAC 
-e?)7 * - 'J yx- y'xyh #'JS-f& * >y F 7-7 kr 
■*-4ffi**#ffrf S. >r^-xnt3v^T(4. >y 
F 7- 7 ii. 7 * - U y*GK-9-- t'X7n; sM y-C'fc § 

Afl?)x— fgf|x- y'iyhi\ 7 * - 'J yx- 
yhi:-e^y bV-Hzmthmk* V h^t; 
sffl^AfU .I^'J 7xxb5:7t~ l Jyx-yxy F£ 
iHfits. xx-/7°2ttjV^T, 7)f-yyx-yxy 

FA*. tfM#*x-S>xyF> LT. ^'JmN5: 
7 *- 'J ysnw— a* o . 7 *- u yamw-b* 

^tuju y<mmzT?*.x-fh z\bx\ iy F'yx 

T^mth^v F7-7<7)ff?B£#S„ Xx-y74tC 
M vt\ 7 *- U y^ir?--A£\ iy F i^Xy-M.CO ij 
7X7. F£\ xy Fi^xi^*-A#£H^-£7.7°a 

V . Agffr+r-y \*#*- A^-f-y S'tfOFDDCT 
mi, 4«Sr< 1 7 *- U y^-t^7°ny^ 
H5-r«»I2IiEffl$g^#S. XT«y7*6tC*3V^T. *-Af 
fltfwfa, $^>t. SHA#«0t4 V9 b 0lz7?-tX 

-r&zbx\ mmtciwxm^- trxro 7 4 ;Htfg ( 
*.J4\ DnAi-Z>V-fx*7'is 3 yco&nm 
xf--y77(cioUT. *-A§#|-»?--ys;#7 U y^ 

fciSWC. 7 *- 'J yfit-A>'7t-U yi-y'i 
yHzT7*xm%J8g*&;mf&. X^y79lz&^ 
t\ 7 1 - D yx-i/'x y b ^xy K y Xf A (ot 

[0097] JMTT'li, <75f-^Jft57-n F art, 
Ay F* »J y7V)^7U*:fc±iP<77T-*£xy F'y 

-tfMPfcffl^S-fert^-^-r?*-* (121 7 ) > s U 
*-hAP*ffl^&-fe/V7-*T?f-* (HI 8) K*rt 
& |3i*V)7°u F a /FX 7 y 7 vCSyDft& . 
[0098] 1117(4. *-A*-y h7-?^xy)< 
>-ArAtrh— AIWFtO^iiftSrfRd Jti6tf07*n F 
3/F7. 7 >y 7 £End Systen#Home(;:2t LTjjH". 017 
(4, 77*7^ yhi:*^A7^|5l-{2gtiES$n 
S^^/l^-^TT^fc^SroFa/i^yF* 
»J y?'£*-r. 

[0099]il8ti, yhfcte^y\7*>* 

p F ajw\y F u y7"£Sr3\ 0jjr$~3> X o fcPPPtelWF 
rttCftJBL. £tf>flU£lilISK y7-*-y h77-t7£ 

PPP-t-ySt IWtfMZtL&lr-XCDffimZ^ 

^xamzmm-h. 



[0 100] Hi SKjjrfidfc:. xyb'yXfAA^ 
05PPP7F-— A(4RLP (radio link protocol) 71/- A 
rtto&7M=/-Wl:£*u £*i&tt$&fc:>Jt-F77-t* 
siM y h<9ffiT^7U-Artfc#rHr/Wfc$:h., F 5 
y?77-tx#4yhizmm%ti&. byyyrr-tx 

x4 y f«, m&^y'tmmmzmjS.LxitLmt&T? 
-bAXAyhx-fot). v^-brr-txm ybiib? 
y9T9*>x#Ayy\ l z. -Mb lx. m&byy?iz 
£~>XW&Ztii>. ZW)*-bT9±X#<l yhd 
MAC17U -yi>t LTiSf&U X.7V y?frt><D7U- 
a fcfca&A 7*1*507 * - 'J yx- y x yM; «t>«W"S . 

7 U yx-i/'x y F«. MAC 7 U-A*^RLP7 1^- 
ASrBXOUJ L, ;cORLP7 y-A5rxtunnel7°n h 3/P$r 

m^x\wizfpMi-h. \wti>t>x.>Yi/X7-Mzmtzti 
hyv-AaM^h-H^tmx'hhz\b zwMxmu-f 

[0101] xyh'y^fA^7t-U yi-y'x 

yviz&m-fht. *f^7*-uyx-^ x yhi:iw 

F t V>mzm ti ^rxtunnel tf g Wi W § » PPP h ? 

[0 102] v*-btPbh?y?tPk<m£imb? 
y^^fflv^u^-hAP-fe^r-^fx^f-^-cii (Hi 
8) , xy K yxf A 1 y h i: w^xr 

u y^ti. b 3 xx/mmt ( f 2 ) b 

iim&&mmffits£vm& ( f i > *fflv^r»fw 

[0 1 033 019(4, p-Sy^xyh'i/XxAlc^ 

•t&7ub3)UX?y7£7jC?. fyfimt, "9" 
-h'y^'IWFt^-AlWFtiO^I-xtunneiro h 
^fflV^S. 7'nhn;wx^ y7^fflc7)^{4. ±iEi:PI 

[0 1 04 ] RLP®(4, y-y-y7.#-t2rfflV^|>C:i: 
T, fifi-^SPPPT-^^7ASrBaS$^ xyKyX 
r A fc I WF h wiaTPPPr - ^ ^'9 A Sr i/—? yx t,zWM 
■fh. RLPJK4. xyKi'X-fAfclWFfcoiatf) 
U y^fiNHtt*iai-r Sfe«6(C3 y7 ^ *7 77")V*- 
7*75'f7*«fl»*fflV^. ft#^JgWC*iV^(4. RL 
PSWu $<btc, xyKyxxAhiWFis^coU y^co 

igt'-y hx y-mzmm-? ^tz^zmma x x/y o-»j 

#P^-h'7.£tj|f*-f £ . xy KyXfAi IWFOIBI^BLP 
(4-tr >y S/ a y«^B§^«J$^l. -tr >y i/ 3 y £il fcT 

Ay b*y comt>T7T j y'izb b'£&. 

[0105] mobile IP RFC (RFC 2003) Otitebttm. 
mzy *- u yx-vx y h *-Ax-y'i y h i;<7) 

?3cr>by^Vy7\,Z\P in IP encapsulationtiffll^il 
^ v \ itfOft^ 0 (cfr^^r J> y * 'J y/7n h ^ivm\) 
p«o±fc|tES$ti4. :w(f^hy*!)y/'7 , oh3 
;W4L2TP7a h3/^®f ftU^'-yg yt<54. «r 
f^CiiOFy^U y^7oh3;l/Srfflv^ai{4J3lT<30 
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[0106] i . rfc imte&uxmfeztihtizr-tfv 

-y>xmmmmL&\ tztzt. *mm*vb7 
—f\t^ ••/ ? tf-zi^ii tx <n b y */n*iT-<r wt— t* 

-Th. o4 0, 7n-3iiJffll£ffl^&£kT\ »§>MS 

[0107] 2 . £ h »j h n;KiUDP< 

[0108] 3 . RFC 2003£fflvvfc*£\ -f-t'X n a n « 

**&9ttfi9>S. RFC2003£:fflVvfc«-&HL a 

tfiDf fc M5C t CO^ItifecT) yy?<r>mz^T7hyty 

[0 109] 4. RFC 2003tC*SlrVC8je$*i£i3fc:iP 
in IP encapsulation^lg^&^Ky:. ^#(iIP 

— 7M y/yXfA^, TCP/IPX? vtizntiv 
-xa-bit, JiS. BUffiOffiA (Brl-ro^vA) b 
LXffl¥bZtiXi5'9. m<7yKyyt<r)Kmm^\ < 
yy#>^TCP/IPX?yy"£®fAU mobile IP tunnelin 
g£lW-hr$fcfclPJifcSSS«:Jil*..6*£\ MftJit 
^(iTCP/IPX^ -y ?<9&*>5:>K->?g yfcHSi-f-fr*- 

[oi i o] *ftmzx&mMmbwt<7)m<7)hy* 

CO*^— t"X7"a A-f fCD^ y h "7-? AT" 
fflt Ztilt. xyKy^fWi^y^^ 

[Oiii] £</0#t;£& i- y* y y^n h 3/nsl2tp 
\izmrS<. LZTPiflete. fi^ h y*>j y/7n h =?;i/f- 
* 9 . L2TP(i h y ii>12SE k & 
^-A*^-yF^. L2TPkJt<. J: S#r 

h y*U y/rn h a;Wtt-M y Htf'Jv& t\ 
£*>3rfcfcxtunnel7*0 b3/Mi, JjTF*)1$»«:8fO : 

[0 112] 1 . £<0xtuimelC0±JfcfcL £tt!J^£ji 
-9"— ^N'kCOHT'fflV^ix^Radius Access Request (Rad 
iusT:?-feXi?5}<) k , Radius Access Response (Radiu 

snuzxm®) * 'yt-'JizKy^m^coimimn 

-fS. Ztit>WMl*hy*>W<7*-?$:W,mL. hy 



[0113] 2 . ss^-vN'tt, A7 7 h^ y* u y 
^•fci^ii-r^n^ttWi^^^P'Sri.iPTh'y 

^ f-3t, MSCfic7)f|& £ -tfw <fc3§ffrT h Z b ffiX' 

■zcofztb. m^-^a. »7>i wF-»f- Afire 

[0114] 3. £tfOxtunnelTnhn;Wi, hy*/U 
h-rs^cox^-U^x^h/E^. f-y^/l^WtSr 
-s/fcL UDP/iP^ob y*y y^«#±£i£fl3;h.s. 

[0115] 4 . £<7)xtunnel7°P t> 3 /Hi. ^^f n— 
Hf-^ * UDP/ip^o h y^ y y ^UttUbtcjMfi-f 5 . 
£c7)xtunnel7°o b3/Wi, 7V-Ufflb^->--y hOy 

-v-yxffifis:^- h-ri, . 

5. £cOxtunnel7-oh3;Ni. ^-t'^JfcW^Hlft-f 
S SWT'UDP/IPmo^«c±t^31-ri, Z b fcT* -s. 

[0116] *»fltci&*v h«7-^tt, y^ 

-*«yh»atti-9-^-h-t&. £<t«, PPP 
IWFrttiRSU. £OIWFA^£OIPyN°v--y h^^-^^^ 

ltspcoip;u-t^ yftrnzm^xj y?-* v b 
t l z)u-T<yy-r&zbX'Mtf&ti&. »*l<ii iw 
Fk^-^{iM^ki>RiP^7yfl»^\ *^t=«tox 

[01 173 z<7)*v by-fit* m&ttzj y 

b-y-txyxiju yx'hbh$m*r-'£A7°uju y 

(WSP) (2itUT»-^)»filt^-K-h-tS. £<7)«JS 
{Cfc^Tti, MSCf*)tfO*-^IWF{iPPP-tf-A^ LTtlS 

4 y^rnhn^^r^yt. ^y^7 Mr-txr 

[0118] £co^t->y by-fit, wsp@#(i-f y^- 
^•y h-9--b'X7°nA^^ (ISP) X'ltt^tzbb. hh 
v W<w*«xy Ka-f Kr^-kx^ilfitti^fi 
SrfficoiSPkcorBTr-tt^^c, xy F yXfA^- 

mwtt&zb * ftmt t m&v- fx yu>u nznt 

«\ ^•S.teH^-t.xrnysw^' (wsp) ^xyh'jL- 
ioiz, %-EMX'hh\s?b<nmz, -eo^H^isPfctro 

?|C0**xyHJL— ifj&i. -ecOWSP^-y h7-?A»<bf 
<rffiE<7)\snzT?*.K$h ^^W^KSrfirott^ 

sc^iJrfciftaSiiS^-AiWFrt-CJi^yUJSrv^ rt*> 
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L2TP (Layer Two Tunneling Protocol) fCOhy 

* U y^7°p h =t/V£fflwe ispoppp+r s^z h y^>v 

>y ? £ *-A t{JS-r y h* y^fA fc*f LTSrT . 
[0 1 19] *-AIWFi:ISP0PPP-9-- J '^fi[BJi N PPP 

IWFi: ISPc7)PPP-tf — OPbJ<t)L2TP h y*yV& PPP-fe >y 
aySratTRffi§#lfe4*(=i:^iS. *-AIWFfcP 
PP-tfwv'fc OSWWI U y ? {i/U-? £tf-LT#fflc7)Ti 
t L < (4T3. I ^ti7 1/- A U U-l> L < JiATM* -y 

[0 1 20] £tf>«Mai, -f>b5*7 hT^-fexi-y 
^-hTI). 4 y hT7-tXCDt&&l&. PPP^ 

N'ttifeSS-f y f- 5 * v M*l lzm& U A I WF(iL2T 

p*jflwc£*uc h y* v yy-th . 

[0 1 21] H2 0fi, A yhy^y h&SOtilSPT* 
7'n h 3^\y H 'J y^'Srn-5 y^'x 
yH^TAt^LT^-fo £*tfi, ±a^fflJSfcti. 
o- s y?'xy f ^XrA^-fy^'iWF^ffl^T @ 
&<7)*-a i wf ts^g-r S *^=5: S . -9"- h* y wf h 
*-a IWFi: <nwy?xi V i)V)\y K u y^'tiff^ii 

[0 1 223 02 Hi, S»7x-X o^O, xyH 

AP-fc/WT-* r ? f - \ fcSt* 5rab3/w^ 7 ?^ 
fLfcJSi?H-T*4. ±56o^'J^{io-sy^xy 

[0 123] xyFyXfArtOTh'^ ijfa-yi 
ttv 'Jf x- yxyht MW^y'ftco? it— y yx 

-yiyMl HfcfcWfcls mobile IP RFC 20O2i:S«-f 
4. lOTtV'Jf^x-y'iyMl ^ >y ^r7_^ x 

?fcW-fftjattornb3^*?.y?fc£$:9s RLPJf 
{ifflv>£>ft&^„ 7 *- y yi-y'x y h a 

(ixy K vXxAC9S££|<y}fc46t;:Radius overUDP/IPSr 

[ 0 1 2 4 ] -fe^f x y -r 4 KH LTHoj&HOjSSrRWr 
&#g#£>-£. SI— tc, xyh'^xrAOM^!lt7^— 

•j y/*-A* >y h v-y-ottw, mmmy^-x 
nmzmm. (mi) %tih. xvKyxf^ 
m&w&$t<wpw--j < iztt l x pppigfi 7 x-xco^tc 

fgffitfff&fcfil. . HHfc: . xy F^xA^PbTCj* 



[0125] HfM«iy H^-fA^H^iJ<7)-e 
ft£<o*-A*-yh«7-?fc*re-4i8ffi (Jt«) teXXf 

*-A*«y h7-i7i:7^-yy^-y hr7-?0)f8B5iJ<75 
[0 1 26] xyKxXxAOfgaEKfcvvtJi, 128 

KCStf4IgH^***jKS*l&. '<7)I2SE^{i, mobile 
IPRFC 2002fctJV^TlS£Sil4SftI<OM)5> -y-fe-v 
^>-*x^hT^yXASrffl^T^$ixl.. xyH 

(eAiiTjift-ri.^i:(i : 5r<, fgiiE^cr)A$rjMfi-ri». 
xyHi/XrAj&^Siiy^x^hSrgfi-f 
AS^-^"(i s Si* y ?xx h r-^*»<3«W<^-fe^ 

x y f ^ Srffl^nsE^ Srsttw-rs . sn-ff L^as 

t-m-h^t, *-AS#f-9--yN*(i. Jil^Sifr 
(i, Jh-AfiftHf-ys'ti, i^V^^SIiL. -fe^fxy 
(nak) 

[0127] SMJCB^^iM Dig-T t # . ^-Aa«tf- 
^'{i±aifc SraSfirf* . o4 0 , ^co-t 

C:n5rxyH^XxAHjIfi-ri». SililiB^^^fi-r^ 
ts xyH >-XTA(iit^c7)-fedf x y f - >f ^ffl^TISfiE 
^ ^Slt»-f I. . Slt» Lfc«W«*- Agft-f-y s'tz J: 

xyKyXfAll -ecO^SrBSSIL. WIS 

[0 128] £il^>^<y hy-^-fedfxy-f-fffifcg: 
{i. mobile IP RFC 20Q2lZt5^X%.mZtlX^&m&t 

Rmztht. #xyh-yxfAtw- 
ryiyx->-3y*^Tt-rs» #ttv Uf-cb^'J 

f^7VyX-y 3 y|t ^a'Jf -(Xi^l/^y 
ay5r^«-ri>. «-fedrxUf--f»i, I2aETyP3*y 
XA. ^-H N ^a'Jf^ AM. 7-7-f^- 

h) . Ji£?^ffia^^^;k fciV'ffl^l.Bi-f-ftcT)^^ 
7*%&th. *minliffit l zte^x&, ly^yXf 

AOUser-Name^ (*-A7 H^Oft*>9fc) . #X 
yHv-^xAh^CO^-A^ y h!7— ^fc^lB^tT-f 
y r -f -fe ^ x y r -f T V yx- v a y 2rt$53iJ-f !> 
fflv^iiS. ^jt'Jf^W-Nyf'y^x (SP 
I) tBf(m-&id-o^yN°7^-^A S; efV ijf-cb 
*x y r- T V yx- ^ 3 y rt^JgcD-fe* i'Jf-fX 

Wct3^T(i, r'7:*/H-niobile IP authenticationT 
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;Urf »J XA ( keyed-MD5 ) J: Iff 7 * ;U h * - K ( "p 
refix+suffix" ) CVfrtfl 2 8 t">y htf)&3f<D-fe3f a 
U7 s --<fc:T1hK-hS*L4. *y h7-7x~ fkL i 

#c^)*-A* >y h 7-7 h ^P B TC«C7)ftW^^^ i 'J 
T y 7 X (SPI ) C7)#Hr ^ a 'Jt4 XIKOSiJ 9 ST . 
^tiftWr-S). gii^t. xyFy7rA(;L l 2 8 

- tr-y f^ i/s.xv*. mnm+tmrn 
ti&Kz -f-7 izm-z tmnm-te x vmmm t txm^ 

l>. mz. xyF^7xAy:. LXimLtzUMFf 
£ . SPI J: tfUser-Namei; . ^11 V 7 X7 F fcA 

fn3frfs„ xyFy7xAcDSii>.j7x*F£5tfi 
-f&t. 7*- 'J yg$f-»/--Ay;, CcoU^xxh^, 
Ell^fcctr/spii:-^^. ^g£jQX-f£. *-a^ 

A£*l£-f & . xy F yXfAA^li?>§U(j; 
7 *- U ygfJhf-A^LTfWgfW^iJW 7X7 F 
£%iE-f2>k. tf-ASflW-Ali. ^cOSPIfcitAJse 
r-NameS-fflV^T-fe^AUr^^M^jitR-ri.. <Wc, * 

JWS . SftJf t fcBIFF c^ii^'x y F yXfA Cio 
xm$ D 7xx F ^AiiTM ^*t*:lME^ Wfli: -SrT 

*-^fit-A-(t xyFyxxA^cfc-^T 
>!fi£;fi/^fi'J 7X7 F^*f LTS5£?)J5&£3!I Oil 

[0 12 9] ^-Afgt-A'ni-jtxyFyxfA 
tCil ill. SSIJE^ ±j££Dmobi 1 el P7 ;F ^ U X A £ ffl 
^•CI2IE (^H) ^-A-tf-Kii, SPlfcit/ 

lt» L /dgfiE^fI£Sf§jfc:g7 -y -fe- y'tAftT xy 
Fv-7TA(;i*fif-|>. S$M?g£5lfrfl>i:, xyF 

[0 130] x— !f7)xy Fy7xA(;t Jfc^-fe^ j- 
'Jf ^ tJ A tA'x-if ^gf^flt-y S' fc SWT l> £T 
co-fe^f i'Jt^ SSPI Sr&oJ: d tMt5 
jfiS?****. zcoayy ^ay-y 3 yffi^li, 
L<fcL Windows 95^-7<?)xy KyXfA^li 

win 951^7 f u w&Mihg. „ micomiz, znmmtf 

[0 1 3 1] *.y FV-^P^&vV^ 7*-'jyi- 

y'xyb (FA) (i. lyKy^fACft^otxyFy 
X^AoaiiSrff^^^. £it/*Sit^7i:*-AIW 
F£> S 1 ^Jilf— t'y 71 WFCOPal^xtunnel Zfflfcfh tzih 
tCRadiusXD F ZV\s%m^& . xy H yXrA*>A,Sli 



U 7XXh£gfi-f Si:. FA(i. Radius Access-Reques 
t^-yh£4ifix;U >IWN°7--y M*]Hg#OStt^ 
AL. S^>fc. xyF^rAcoSIf U 7xx bc^Jltt 

LT*S-£L£ 'J 7X7 h ^MSC^c0Sii-9--A^ff-t 

[0 132] RadiusfgiEfcti:. Radius77-fTyh (^ 
COm&mimiftCOF A) iRadius-f-A (zcnm-siz 

ti. Radius7 7y h ^Radius-tf-A'tfOPalTjift^il 
|,7M^<-hffi|gOBg#-f^tfflV^^|,. iO^W 

5. ^•yh r 7-7«S. Radius RFC^gj^^-oT^cT) 
U-r -f *>J:t/MD5T^3-yXASrl2.SEco^^ffl 

v\ vg^ttf<mtztL&i§&n. mmtntzMzhm 

V>^.. FA^ioTjMfi$^-g.Radius Access-RequesUN° 
dr-yhii^ Radius User-NameJStt (ifL{ixyK^f- 
Mz£-oX&&$il&) j^t/Radius User-PasswordJl 
14S-i-Oo User-PasswordJRttcOMt 3y7-f#7 7VU 
^fflT-S) 0 , RadiusXo hztMz£-?XWmZtl&1i& 
lZffi.-?XVimt£tl&. Radius RFCg^cO|g^A,(i:# 

wmm'&x'foh*>v hv-7Wt^ffi^)JSttt, <y 

7TOi7)RadiusJStti: LTw^-ftSil, Access-Request 

^vbizxtLxmrnztii. 

[0133] FA{iOT^JSft& Radius Access-Request 

^y-y hi l zwAixsmv-;vzmm-t& ■. 

1 . User-Name Attribute ( x-if^Mft ) » itl(ix 
y Kv7xAcoj-— r^T^O. xyKyXfAtio 
TSIJ U 7 X7 h KAflT&ij^ftS . 
2. User-Password Attribute (jl— ifVN°X7— KJS 
tt) . :^)x- !fVN°7V-F(i, »l^/iE|g^7^J; 
oti- Ffc:ffcb->Tftte;&*lS . iWi. Radius EFC 

[0134] 3 . NAS-Port (NASrK— h ) <, .liltiStfi 

4. NAS-IP Address (NAS-IP7* Hl^X) . iiltSStte^ 
C9IP7FI/7T-&S. 

5. Service-Type (-f-f77-< 7") . <rftti7lx-A 

[0135] 6 . Framed Protocol ( 7 U— A F7'o h 
zx)V ) . £ WiPPPT o h n ;UT'c5 S . 
7. Xtunnel Protocol Parameters (Xtunnel7"n bZi)l> 
. Clii4>c7)^-7^-7{iS^tck-5Tx 
y Fy7xAtCfti5-?Txtunnel7' , a h n/U^lg^-f^ 

[0 136] 8. AP-IP Address (AP-IP TVUX) . 
diKiJL-if^'Sli^l^tfflv^APOlPT H P7-C'^> 
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9. AP-MAC-Address (AP-MACTFl^T.) . dftte-X— !f 

*«a«<oiefc:ffl v * s apsomact f u7.t& & . 

10. End system's Registration Request (lyh'y 

[0137] Sil^-^NWTiOEtt* Radius Access- 
Response; \°7" h t AftT F AlCjl 0 M~t : 

1. Service Type (-?-£';*. 7°) . ,I;ft{i:7U-A 

2. Framed-Protocol ( 7 A F7°Q h . Ztl 

3. Xtunnel Protocol Parameters ( Xtunnel 7"o F ZHV 
Txy H v-XrAfcffcbo X xtunnel 7°0 h 3/l^f&£ 

[0 138] 4. Home Resistration Server' Replay 

ini.^ fitt6*>t*--y FfcAixtxy Fv7.tA(c 

«wirts. 1 7 * - y yfit-yw#4t I. 

[ 0 1 3 9 ] n- S y/iy F yXfA icfr- h'US 

F 7-? He r # 7 > ■f J: tfHt&O @ W 

T\ tgfEi: 3 y y j % j. v 3 y^fctf^RadiusTo 
h=W£ffltvtBH (^U) -ItOfgaKixyF 
y^f J*ifi&8t h t # tjUfrSitS . ±j£OJ; 3 (c» 

TAa»4>OSft'J ?XX h ( iiHiFACtoTRadius-A 
ccess Requests - 7 Fftfc^y^llWiOEtei: LT;7 
r-fe/HtLT+HtSit*) ^fttSi:. ::<7)7*-ll 
ySiilr-Ati, xy H^^rAtfONser-Name^fflV* 
T, g#<9*-AF^ yf^l/^Mi (HDD) fcgflK 
xy F v-TsxAco^-ASIitf-yN'^iiS 1 ]^ 
£o(tl>. ^^^yf^^N'J (HDD) fcti. 
WT^t»$*TO£ftT *j 0 , 7 * - u yS$i-9"-^'(i 
xy h vXxAcoSi*U 7xx h £IS£t£fc*>fc:c:*i 
K77-fe7.-t£ : 

[0140] 1 . Home Registration Server IP Addres 

s (*-AgH^--A'oiPr HW) . £*Ui«8'J? 
xx F <^tei£ftO*-AS!Jhf-ys-<oiPT H l^^"C& 

[0141] 2 . Foreign Registration Server Machin 

e id (7 jt-u yeUi-t-yN'^v^yid) . <:Wi, 7 

*— Uy^li- 1 ?-— ^CDSMTP (simplified mail transfer 



prorocol) 7 >y bX'<7)~?i/yiDX'$>& (Zil 
te, #Rt£. machine@fqdn^5t £f#*>, V^y (mach 
ine) (i7^-U ySI^-A'-eyy^ff^aL. fqd 

nti 7 * - »j y ftfttfw n'ct) F * a yv)%M<m 
v&x-hh ) . 

[0142] 3 . Tunnel ing Protocol Parameters ( F 

y*Vy?ytih3jwij>i-?) . ztit>l&. xyF 
7. f- A fc ft *> T -9" - 1* y I u F t * - A I wf H o 

7P<-^t(i. £ft^P a TCfflv^ixl> / <# hy*yy 

[0143] 4 . Shared Secret O&iCD-t* a D f 

<X'hh. i^-bdfa.'j'T'ftt, 7*-yy®ii+r-M' 

A> A> *- ASaW-y < fc jifl $ tlh Rad i us User-Passwo 

[0144] 5 . User-Password (jl— fnzs?— 

F) . ;WiD-iy/xyKyXf^Wt^Tfflu 

- H(i. 2ocoiell1f-h'X7*oyNM ^<7)HTSS§<t 
,IC0A o 77-F(SRadius RFCCO^^oTSWO 

[0145] 6 . Accounting Parameters ( 7^7Vf 

—?x°b&. z.tit>rtjx~?\$, mk^f-^zx^x 

gtWK:xy KyAfAt^^TT^^yf ^ y 

[0146] 7*— >j yaii-if-^'fi, ±}$otif$g£ffl 

V>TRadius Access-RequestS-^^L, itfORadius Acce 
S8-Requestt=i*^)a»tj it^giEflBRSriBJnL. § 4> 
(C^<7)Radius Access-RequestF^ltCXy h'yXfA^ii 

4. 

[0147] *-Aa$|r9w"\t2 s Radius-Access Requ 
est^rxy F ylfAfr'D- 5 y ^ LT V \$ 7 
- U ya«lf-^*^r tT^ft xy H yXf^W 

set*!: s \m<n^\m$s<r>^ ^ v w-^iz 

LX^cot* * Vfi*\§h?Lt t*x y F yxf 
A^fiESrff^d. — ^T. iyFyXfA^'n-Sy/ 

7*-'j yaii-f-^s^iisij^fsii^ 

[0148] U ?X7 F<7)l2iEt^LJt^(i. 
AS^Hf-VN'Ji, Radius Access-AcceptC^^-y F ~& 
^fiKLs «rix€rxyF^7>f-A^Q-5y^ LTV^^ 
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XfA - A K ®St 4 , £ ft £ Rad i us-Acces 

s Request^jlfifC^^FAtMgtCilOjg'r. 

[0149] fltefr. y h«Bat*|lkLfc«^ 

(±. # — Aaii-f— Radius Access-Reject^^ n° 

^T, xyHv'Xf-A^xh— At:filtl>^li Radius 
-Access Request SrjMff LX # £FA(CfiKI3£ 0 jgf . 

[0 15 0] xyKy^fA^'n- = y/Ltui.yt 

mv-'Mzj:^x#ii<7)**x.v'r<*m^xmm. (m 

IE) §ft4* ISIE^c, 7*-UyfM3W--^*tt. J6 
S^Myi-tS £ i: T\ S#<9FAK&fI-f 4*r#>C9Radius 
ifrg^7--yh (Access£>4^U:Reject) ££j£-f4. £ 

X -?Tjgft$ft^RadiusJ^A'^- > v b*>£><»M?gJS 
tt*. ^Jg£jQ;i4<ri:&<, FAt^fif&RadiuslES 
y^. y hF*H;:3t;--f4. 

[0151] FA(i s Radius Access-Response* 4 V>teRa 
dius Access-RejectE^ ^ >y 1- Sr^ft^-g) i; . Z\(DRa 

h££j£U £*>J68^»y r-Srxyb'v-XrAfcjMfl 
-f 4. ^iiCioT?'^' H h 'J y7°g|fv-^yx^' 

[0152] Mobile IPSHSJi, £fJ^<D{TiI£. 9 

j&xfyrzm^x. fti.vwygyuyyx 

(nonces) Srffl^T^-fS Z k fcft'U 

- HBIlciE«fc:H«Siifc 0B#? o >y ?#g#3*U . 
Z\<?>tztb^ Mobile IP^PTt£:?W AX^ yT^fffl^ 

suit/ yxwmmittTis 3 yx-hhit. *wnx 

<0«a*S88«- 4 i i: 6*14 . 
[0 15 3] y-K^-C-ffl^6ft4jemH^X^^;l/ 
(i. ***yr*:^rtKi8iiKIlR, *-H, ^a'J 

?(ix y H yXfAi ZcDPPPy-— J<b 0[bIc7)PPP'\— x 
T'OPAP (yN°X-7-H|S.gE) fcitXCHAP (y^7-h'|g 

le IPfc J;tfRadius^-*<3l8iiHRttfc ttttifcfffcfc 
fl4„ iftti. 7'7^<-r-^ y h7^>7 h$>4^(iIS 

Wi—y <oiigij*ai4fc:«iiiEi-4 i fc mmiz-tz . 
[0154] tATTli. r# -f y^'fc cfct/r * ^ 



a y r -f t ^M-eM-f 4 . r-hsci*i<9* -y h 7- 
7Haea»4>c9r 4 i"? h y7w<^7?-fexc9%& x 

ISaEti^i: Sft&M. 
[0 155] *-y f-<7-?ti, xyh'yXfAt*-A 
IWPfc <0H*CftiS $ il4 <T 5 r - * *>*HfcfclM*- 
Kt4. xybyXfAll i^tS^a'Jf'fXIl 
SrSHK-f «. £ i: T\ **ffc#* y *4 V ^isf 7 $ft4 Z 

izftt& u 9 x^. h * -fe * i y r 4 It »T 

t4. IglET^d-yXA. "6 H N M^tJfi'jf 

fc *-ax- yxyhi: araewftbpiaa ( tee > $ 
ft-r ^4«^«, ppp7 u- A^^^jgji o tcBf-^ft: 
Ltzmz. Zti*Kmzi}T*:Mkth. 
[0 156] iwf, r^^yf^ y / 't-A > fciVT 

^^yf^y/WfAit MSCp^c?D|5j— c7)iflt$tL7t 
F^-f y ( trusted domai n ) g|5^T** 4 . itl^x 
yf^f^fi, l"I-LAN±fc^$*L4*\ $>&Wm 

m*-t'x7v;u yizZixm^&XT/Mmzti&m 

ftZtlM yh7*v hn-ffiftlZimZtLZ,. IWFfc 

TA*>y?4y?-?-j<b<M8l* m/izTtivyTjy 

[0 157] h7-^T"(i, xyHv-Xf-A(7) 

{iMSr^x^-rs-tti, iDfflilt^4. Cft«, x 

y h* yx f a vrnx-mm §fi4^rc7)ppp7^-A 

fiK xyKyxfA r'y ~W xc7)||^c7)fia HBf^^ < , 

[0 158] TtTyyT-jyyT-fii. * vb?-? 

t'yyiwt A IWF(c J: o Tma6 6ft4 . -f 
-h'y^iwFtj: otift^^r^^yf-fy/f- 
?fi. t-fy/wwc^T^^yf ^ y/t-^ 

{3jM6*L4. *-AIWFC«toTm^6ft^ Til^y^r 

^ yy^r-m. K-j^wamm^Tt^y^- < yy 
*r-mz&t>tih. ^-t'y^iWF^J; ^xmbhtitz 
TAf/yf- jy^T-fte. yx-vynmy-t'xy 

- r oy \M ^«IHSIT» Jtf 4 fc^tffl v ^*14 
§*14) . ^-AIWF^J;oTm* , )6il^T^7yx4 

y?T-?ii, xy Ki-if ^-r4^^a^^-r4 

fflX\ o-$y/ttt'^ Uf-4 SlW-h-tifctot 
»a:^4/i* , >^^fflv^6i^4. 

[0 159] ^t«f-^h7b -y^A\ xyHyXf 
A i 1/ 7 * - >J yx- x y h ofiSlcP^^r 
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[0160] "9--h>^IWFt5 itAft-AIWFW:. ^||L 

mm-htztbfc. 1ft£L<li. RadiusT^^yT^f y?* 
7d h . RadiusT^ *7Vt i WTa V o 

Mi. F97METF RFCttJ^TaSS^SaO"C* 

0, .IcORadius Accounti ng7°o h iO^-yh 

[0161] RadiusT^'y-yf^ yfTn bzvU&WP/ 
(i. UDP7*# ^Vf 4 y h £i#cD 

Tii*7V*r4 y^-j^z^mth. -tit. T/f^y 
t a y/t-A'ii , TftTjy-r a y?7 yAryy\,zm 

[016 2] *>y hT7-7rt£tSVVC % TWyftV 
79vATyY (V— t>?'lWF&J:i>'tf-AlWF) (i, 

ryHi. t7y3yfW:t>r*>)yf^ 

£ N IETF RFCK^7 hRadiusT^^y-ri' y^'ti, T# 

ij^y^4y?mm:*E5fc$h. zwrtj^yrAy? 

JSttti, Acct-Status-Type of Start (TUl^yfA y 
?H5&f£S) £-£tf£T?)Radius Accounting-Request 

yy+r-mz^ ^arm^yfA y^vn-Ktff-x >y 
7*4 y-f -f y^v^- H-c*>4*»5*»&ii*irrs^«> 

io^rti. f-x >y yf -* y^t^r . y hoMfljlJK 

[0163] -^-t'y^IWFfc «ttX*-AIWF(i s #@tf0 

yy a ^'^yiVT^^yy- a yy;^x—?izn, t% 
•)yf-< y^-^N'oiPT h i^fcitAiDP^- h . f- 



x -y yf 4 y^'OjSJg, -t «y y a y/-?^f~fe -y 
y 3 y«iD. tekTiTij^yt* yffyATybtT 

[0 164] *>y r-7-?U;. #I8LfcX>HyXf 

z\tit>T*?vyf-t y?wm$.. -tr'yygycoifim. 
■fe«yy 3 y^m feiWi (fx7^^yH 
(cfc^r. yytvAryyi.zi.^x. * 

Kt><n7i]*7y*f a y ^t,z. RadiusT^yf-'f 

y^V\-y.y htAiir«eSitS. dcORadiusT^'/y 
r^y^A^. y Mi. WT£-£tf : 
[0165] 1 . User Name ( a.— f £ ) . C*lte±j£ 
cORadius User-Name«tti:^ftt-t§. ^«0JH4(ii-if 
S:aSS>J-fl>^«)(lffll^il, £XCD7%*Jy7-A y?v 
tf—b\*\l l Z?pfet&. 7*--?7Hi "user@domain" 
cO&^Znib. Y*-4y\i (domain) fct JL-^tf)* 

[ 0 1 6 6 ] 2 . NAS IP Address (NAS IP T H U 
X) . >Itl«i±ai(7)NAS-IP-Addressg1±i:^fJK-r-S». i 

3. Radio Port H . Z<?>m&l£3-—fl l zy- 

- t*x 1. 7 ? -b^^>f y h±^is^+r- hfrtt 

[0167] 4 . Access Point IP Address ( T7 
-•K-f y M PT H UX ) . Z cOJlttii »f - (C-»f- fx S- 

s. z<nmm±Kyym£<nm i &tLx® ! %fcizti&. 

5. Service Type ( ^ - 1 .X ^ A 7° ) . <lil<;i±yi<DRa 
dius Service-TypeRtttSft-f*. i OJS14c0fl(iFra 
med"C"i5 S „ 

6. Framed Protocol (7l/-AK7'nb3;H . 
(ii^Radius Fraaed-ProtocolJSttfc^lR'f S . Z.<F> 

[0168] 7 . Accounting Status Type ( Tij^y^r 
Ayy^m^AT) . itL(i±3zEc7)Radius Acct-Stat 
us-Type|Stti:a«-rS. ;oJS14c7)il(i. i-1f^Rad 
i us? 9 ry h i:C0-fe-yy 3 yto» ^^-fStart (ffl 
ih) i)\ f(?)liad\usi7y-<lTybt(7)-lzvi<-3>cr) 

f?±£^-fstop (W±) xhh. TtvyfAyy?? 

A T y V \iZft LXH. Acct-Status-Type/StartSffiiX 
y K^X-f &Wg$3tLfzt%l l z£.f&Ztl^ Acct-Status- 

type/stopJStttexy h yx r A* { ^^ ^^aiffi 
HtiimLt: t tth. l-n-vttf-J ybizft 

LT(is d^attOffltiStartf^O. Accounting Chec 

kpoint (T^yf^y/'fiymyM Mttt^ 

[0169] 8. Acounting Session ID (TfiVyf-J 
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y^-fe -yi/g ycOID) . ,r;ft.Ji±p$CORadius-Session-I 
d^^-fft. X/'F^f^n-ay/U^l.y 
^^■ y y a ymi^ xyKyXfAi^ 
ft y 7 F £3Hf Lfc k S £7 * - U yfi*frtfw?fc 
JoTfiJ^Toftft. i-h.«a«^-^y^*fc:7 

* - U y®£!^-^>&*-A^|^WN*fc:j|i{I$*i 
ft. 7 b 7-; 7 1 - 'J 7 F7-;^M 
^fctAcct-Session-IDMtt^ftHTfcDs ^OJltt^ 

* e o r# »? yr ^ wt—t mztjj yyf-iyyui 
Aic^-tft" i^'j^-rtL i^att«*-^a«^ 

-/\'fcJ:oT£ji!t£:h.ft. *-A^$Hf-^ii. icr)E 
tt^fflSr. i#oiwFfe:iijarrs. -ffth, iwFte,i;rt£ 

[0 170] 9. Accounting Multi-Session ID (Ti) 
*7VT4 yr?Ar'Hivi'a>0>W) . £<lt±JL&<9Ra 
dius Acct-Multi-Session-IDfc^If^ft. Cl<y)ID(i, # 

HI) 7xx h3«FA*»4>B»fc5CSc«*i*: fc # . g>&Mt 
Zixtf7*-V jt-LX&mztitik*£. 
W J 0 ST oiift . £*Ui*- AMUN^ft 7 * - 'J 

vmk*r-> *iz#mmx •* -t-^zmxLxm^ft. 

ft. 7=t-'jyfi't-A'ii < ;coJS14c7)ffl$r. g#o 
b'tifA-fft. 

[0171] ^HflTIST-JfT^^-^^EO* y 
r-f #'jlfln£ftft#\ <I<0lD{i. xyF^fA^', fo 
UWfr^mwizmhLtzm^lz^ (Si-coxyF yx 
rAtc^ft^ftiwFA^c^T^^yx^ vrvn- 

F*£ — 3 fcffltf) ft 46tCffl V ^fift . I WFftftBTtV n V 
Ktf7 IWF^^fti: r^>7yr^ 

-FflsOAcct-Session-Idt.^bft. fcfc'U Acct-Mult 
i -Session-I d^Sttti , -eox— f fc-fr - t'X £ilf£ L 
^TOIWF*\ 7*7yf-< y^Vn-Fi*)^-?) 
fflSrffl^ft. -b-yV3 yiD(S, 7 

* — 1> y*«y h7-?fc*-A^7 h7-^(7)ffi^^J: 
oTft&fravfcO. M*-y F"7-7{2.ril£>e9Rtt£ 

iD&J:tf*v;H~fe -y y 3 yiD£fflvvcHH!sliW-- t'x 

ofcffltfjft. 7*7yf^ 
ilft : 

[0172] 1 . Accounting Delay Time ( Tij^Vf 
4 yfmmffift) . Radius Acct-Delay-Time<7)JKtt £# 

2. Accounting Input Octets (Tij^y^f 4 y^Xj) 
7f) . RadiusAcct-Input-OctetsSr^BagiiiTt 
^. ^JittiixyFyxTA^iMfl^ftft (xyF 



^fAA^*7 F7-7fcA7J$:rlft ) ^-^f 7 F<D 

^Sriii^-rft^tcfflv^iift. ;^7yMt to 

7^-^-^-y RLP-ecOflfelCioT^tft^- 
a\7 Fli^y^F^fi&o. 

[0173] 3 . Accounting Output Octets {TiH^y 
T4 yy&JlXfTV F) . RadiusAcct-Output Octets 
£#Bg$*ifcv\ ; OSttJix y F y^fA izm oft ft 

(*>y F7-7#>oxyF'yX7^£ai7J$ftft) ^7 

r >y bcr>m£Tm?ht*Mzm^t>ti&. 

\±i*M%^my\s-i±*mrt-htzMzm^fi. x 
F*J*\ RLP-eofl&fcJoT&fc 
ft^-y^-y Fti^y^F^fL^v*. 

[0 174] 4. Accounting Authentic (T J}**? y^r 4 
y^fgll) . Radius Acct-AuthenticC9JKtt£#H3$;fx 

ft i\ i <oStt^fl« z<n?ti -7 y r -r y 7' y 3 - f # 
V-t'yyiW££*>X£j£Ztit:fr*-J>>\Wt l z£'>X 
£.f8.Ztltlfrl,ZlZ£^XLoc<il (*-A) ^Remote (7 

[0175] 5 . Accounting Session Time ( Til ^ y 
T 4 y T'-fe «y y 3 y»#^ ) . RadiusAcct-Session Time 

stt3tB#ia<oa**rr. -9--t*y^iwFtc «t ->x&mz 

titzisr&lt . >! coSttfix-if *^ct)h?-- b' y ^1 wf*» 

[0176] 6 . Accounting Input Packets {Tij^y 
7-4>7?J}rt5-v F ) . Radius Acct-Input Packets 

^fl$^^°y-v F^^jE^-fft. tf-fy^IWFO 

diOStttixy F'yxxAj&^-e^-t'y^ 
IWFfc A7J$il^PPP7 y-Atf)iSc£iti&H-ft . *-AIW 

Fco^ti. d^iSttJixy Fyx-?A*>o-ec9*-Ai 

[0177] 7 . Accounting Output Packets ( Ti]*7 
y-T4yy$tflt*tr»/ F) . RadiusAcct-Output Packet 

ti. ^•co-7--fy^iwF^A,xyFyx7 : -Atiiift$ii 
^ppp7U~A<7)ifc5:ieBN-ft. ^-AiWF^^ti. i 

<oRtt«-e ai hf*» ^ x y f yx r a izmm § <x 
^ppp7^-A^a*ii8w-ft. 

[0 178] 8. Accounting Terminate Cause (T^i"7 
y-T 4 yf&WIE) . Radius Acct-CauseOJa-fi ^# 

as**^. iaxT. mmnmm-x.htz^z^(7) 
T^)^y z f4 yyutf- f ftt,z<7)A.#&-t& . 

[0179] 9 . Network Accounting Terminate Cause 
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mmtoymiwmftt u-«wwts*i, * ? y 9 y 

»JB^r<0*fc:Radius AccountingHttrtCJf A LT$8£ 
SftS. SPRadiusJgttT'fcSAcct-Terminate Causet 
<r<75JStt(3Acct-Terminate CauseSttt^i o 

[0180] 10. Network Air 1 ink Access Protocol 
(*-y hV-^^4"J^yT^-txrohrj;U) . Z<7) 

^-feX7°nhrj;u^^-t. i^JBtttt^y^Wfrc^Sitt 
[0181] 11. Network Backhaul Access Protocol 

Tuv^Dvz^-f. z&m&it^yym^m&b lx 

[0182] 12. Network Agent Machine Name ( ^-y 

[0183] 13. Network Accounting Check-point 
(*>y trilby 4 y/fi'/^^^h) . 

RFC H 7 7 h Radi usT f} Vyf-iy fii. fr/W 

7-y*(4. RadiusTX^yfw >fWto'**'9 hftlZZ 

TfiVy-ri y?mk> Vr «y h t*> & i i: £SB*^ S . 

•y hT£>& C: £ . TA^y^4 yfW&Vr 

•y h<0^{Si<7)mit«-&S^V\ 

[0 1 84] #4 t^HJtWfcfeV^tt, &X(T>Tfr7 

yy-4 y?n>r», htJiifWj&rimwtfWi, MD5t5 

Jtf£W<0-fc*aUT4 2:ffltvCf8iE (^E) 

d{Cffj£$*U IWFfig^ORaiusT^^y-f-f y^'-r- 
^tilfrf SiH;y Z<7)*t&co** a U r << S-fSaEcort: 
tfXCffl^i. IWFfc J: -sTr^yr- 4 y^'tf-A'til 

MSStt •£> *-v ypX'i y? < is? h Oft 

AcoSliy-^-yx^n^. Sii-7--^>^iWFtil^ 
ft*. 

[0 18 5] Tt^yf-4 yfV—rtVyhVx.TtUB 

zWztiLW&h^yVi.-ffoX'yyth. yxfArt 



X'<?>T*]*?yT4 y^-f-^^wu. *<y b7-7g 
S (tf-AiWFfcitftf-t'y^iWF) fra&coTtiVy 

■r 4 yy^f- 9 zmb . z <?>t- ? zmmts «t # taw 

<7)T**7y"rA yr^-t&mmz+rx-h-fh. a 
m<vri]^y^fA y?~7-mmmm*m^m&i&. 
Tti^yr-j y?y—'M. r^^yf^ y^vr?-H 

cp/iPh7yx--K-hjf^abTiK)H-rs, ;^@wc7) 

yXfAfiA'y-7 h-f- AMASI&l/ 
3-1*7*-' ?-yh£5£g-f!>. *»tf>«i2S««£ffl^ 
MSI*. 7*7yf^ y^Vn-FfclHte' 

yf^ y^Va- Htr^-b^-rsfcft^fif a*«fiiffi§ 

HMt, £*i£-f-7*fcS#iitr. 

[0 186] ®2 2{i, ^-AIWFftSV^i^-t'y^I 

Tij^y^rA y^f- ?fiK Tij^yf^y ?*T-j <\<z 
£^xw&&£VmtoZlx&®Ff-*7F?. Tii y-r * 
yyit-svzx^xmfrzti&tmiziz. wfrb%m 
ztuz&.oTWy'r a y^T—y^y 4 >v? v y?\ 

7tfc< *-y h7.'7-y7Wtg : 5riSi27-'^7.y 7 fc^ffl^ 

[0 187] TH^yrA y^-A'(i, £.coT#vy 

7-4 y?T— ^<7)3!0a$r. xy FyXT-A^-eOmobile 

xA^-fe yxay^T-TSi:. 7*7yf 4 y^- 
ys,(i^-^-ir y^gySriltTm^^^cOT^^yr 
^y/f-^^ii, 7*7yf ^ym'J (S 

^^-^fc«ttS*t&r*»>y-f-f ym'Ji/a-H 

(4. ASN.l^-fC$ilfc7r>f;l' (ASN.l encodedfile) 
*^-f yh-fS. Z<7)7T4Mi s xy Fy^f A^t 

■y y 3 ymr SPWI&T^ »7 y r * y ^ffl «Sr*tr. 

mv-yy-i yrir-swiztetoztitiT-fiz. <z 

tc, P^T-^S6jMx-y'x y h t J; -oTS^^y 
X^AfclSMSill). SiJ^TjSi: LT. ilM-7--t'X7 
d^M yi) i Ti]*?y : r 4 y^r— ^SrSQLr— ^^— x 
tiXV/1b h V ^iiASN. lflF^fcS/ufc: 7 r 4 4» r- 
rSr^LTH^yxxA^tejM-fSitiT^-g.. r- 
^^-7,xdf-Ai:ASN. l W^kS iifc 7 r -f 7 * 
-77 H^Mft^fiJffl-C^ o IZ V^j.* y 

Mk£*u msizvmztiz. 7*7yf-<yy'yxf 
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-t<\twm^wmh. ^murr^yf-iy 

)vx-hz>. Tij^y^-A y^-^imm^tix^hr 
ij^y^j-A y?ir- ? vy^iffo h^yyjtf? 7>v% 

mmtr^^yy- j yy^-fcotttfzcvmmaTiz 

[01883 JnA#rV h MX^zMtm 

m£feMi-&tzMzm^^tL. tf-A*-y hV-ffMZ 

jufbv zm«*& . &MAmiznLx . jha#t ^ u 

[0189] 1 . User-Name (JL-Hf£) . JnA%l/3 
SMTP:7*--?-y r- (<rU<4\ usergf 
qdn) <m&kWo. usertf7ffi|(i. flUA^£JllA&?) 

fcio TflD A#fc ^7h7-^t-t'X fc JDA-T & i: * 
£8« 9 3 T 4>*l& . i <0««PPPC t> I vc 18 V* hflh x 

[0 190] 2. Mobility Security Association 
3-FpV>.I<0M«U iDA# A* -y h«7-? 

*tt. ±^^<tat^ #jDA#t-e^*-ASi^-^' 

U ^a'Jf^ilt IglET^'JXA, ISIFE 
tXx yKyXfAt A-tf-y < t OlSJT'JflV * & ^ £ B | 

mtw^r (mmtitistt) fMfeoBL * 

-ASiJHf-Ayu xyKy^fACi -?TSfill ?x 
X Mc#ALTtt^§fLl.User-Na(iiefe J: ^'security pa 
rameter index (SPI ) Srffl^T-IcOjnA^rV h U 

3&»<9-t^jnA#<o-t^ a Df -f jcmizm-f&mmzm 0 

Hi-T. ClO-bdf j.'Jx^XMrt^tffgfi. W.yya 

7Vyx-y 3 yll |^lt-h'A7nAM ^(-J; -,T 
JnA«3£l&$ftS . 1nX%tfZ<?)TV yx-y 3 y 



+r- t'Zffi 0 tC^IS LtiK). secure Web site (-tr^f-o. 
'Jf^xWb) fcT^-te-X-J-iifcT. ttV 'J 
r^-fe^faUx^Ty^x-^a yflrt£2:5ii8*SV* 

x^xftztihMvMtMffimizTt-tA-r&z t i>x 

[0191] 3 . Modem MAC Address ( ^f'AMACT 
X) . iiOflSJijDA^tCcfcoTFyTW^ilS^TA^MAC 
XFU**-atr. a«*«0Bfc:. £W^-tr* a lif-( tin 
*T£tf)Mix-ir£i8fiE (IMS) ^iJtftfcfflv^^ 
4. £ <7)MACT F tSo' < ISfiEfi , a-f\-XT 

* 7 znmTFuximmnmiz 

[0192] 4 . Enable MAC address Authentication 
(mCTVUXimmW)) . £«0«tt. MACTHl^XtS 
^<|g|iE* i \ enabled (jfitt) S*lTV^4j&», disabled 

(^flg) t3*lT^S*»*^TSfe«>fc:fflV^il&. 
enabled (gift) *-Afitr-A' 
{4. S^trlfi^TV^^xyHv-XxAiOMACT KUXJ 

aWfl*»IE"f *. disabled (^ffe) 

[0193] 5 . Roaming Enabled Flag (a-S y?% 
WMM) . £c7)}i*%nabled (jg») tCfSSSfLTV^I, 

xyHy^fAii 7*-yy*7 W-nz 

U-^yy-$-hZ\>*Vi%i\h. ^^Wdisabled (>T 
ffi) lzZtlX^&t%£l£. lyFy^fAll 
y * -y h «7-^ ten- 5 y X-T S £ i: ISftSfuSr^. 
[0 194] 6. Roaming Domain List (n-sy/K 
*JyVXh) . d^KRoaming Enabled Flag^enab 
led (®»| ) fcifc£§il-a*6*£fc<0*£!ft£i$O. 
£<0flltt, xyFyXfAW^Cn-Symch 

XWNUtf-i-lV (^) T\ L* J t>, Roaming Enabled 
Flag^enabled (jg» ) tCfg^$ixTV^^«, ^c7) 

[0195] 7 . Service Enable/Disable Flag 

-5 T . JDA^W- t'X Sr^tC-T ZfzlsblZdi sabled 
( ) fct&Jg"*-* £ i: *»*T§ § . Z CDtfiWenabl ed 
dm) fctS3£S/VO^*§£«. jDA#(i^-t"X& 

fc^C £<7)ffia<7)fi^disabled (^fg) fc»J6SiifeJ| 
•^Ji, ^^SDA#OxyK^T-A{i. *7 
J;^Tfi|lffit=-tj)»r$ix§ 0 

[0196] 8 . Internet Service Provider Associat 
ion ( -f yf— 4. -y Mr— h'X7°D>'^ ^TV yX-y 
3 y) „ £«4JnA#co^y^-^-y ht-t'xrn 
^<-f^fcH^ifl!«Sr*tf. £^-ff#{ilWF(cJ:-pT. P 
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Phy^USr^-rSfc^tfflV^fLl.. i«±SDA 
#<0ISPOt§^'J£^t?. IWFli, ^COHS'JffifS^ffl^T, 
xy K i^T^;:ftboTtSfiE£L2TP N V*)W)Wl'jZZ 

[0197] 9 . Subscriber's Name & Address Inform 
ation (MXmcD&m&X-l/TFUxmm) . Z<DM\l 
JDA#?)£Ik 7 Fix 7., «fg s 7r7^, e-*- 
/l-7r-'l/7J£&-trfr 0 

[0 198] *-AFpM >T<U?hV (HDD) 
Sii-f-^'t J: ->X . xy F ^XxA(-ft^^T®li^ 
Sfcibfcx y F y^xAtcHg-n, £H 

i^t a»9--^tt*-Aa«Hf-y^a!Pj*fflv\ x 

f£gJ£fflv\ Radiusftil (7o^fy) fc l/CWBU H 
i^HDDrtttg^SiiT^^o-Sy^xyFyx 

ffi<r>\-y*)va>7 j Jfai/-y 3 ym { H?tti&. z 

<9HDDUJEC|*l£ffiBtS » 

[0199] ^^HDDrtUiWT^t»fg*^*rt$fLT ^ 
& : 

1 . Home Domain Name (t^— A^'f y£) „ <Ic?)fliI(i 
xy F y^fAt «fc oTSli 'J 7X7. F izMixm^ 
*uWS^HWW«-A KX-f y^fc-^-T-SHDDrtcDxy 

2. Proxy Registration Request (-ftJISii'J 7X7. 

mmt. xyh'^XxA<7)SIS>Jy'x^hS:^<7)*- 

[0200] 3 . Home Registration Server DNS Name 
( ASH'tf — s^C0WS£i ) „ proxy registration re 
questfliStfTRUE (*) T*S*&ti. 7*-'jyfi« 

S^tr^HrX-TI,. *T*V^tt, <r^ff*1U«£ 
tl& . i ?)DNS£{i 7 * - 'J y«$i-9"-v J; oTIPT* 

r-'i^x^lR^ix^ . 7 *- y yaif-9--A(i,ic7)ipr 
Fl/7>£fflvv?\ xyb'v-^TAiOSI^U^xxhSrtf 



[0201 ] 4 . Foreign Domain Name ( 7 # — U y F 
J>W y^) . proxy registration request figfi^TRUE 

(X) 7*-'jy«ii^-Au: s <rcop 

SrfflWC 7 * - 0 y b* A y^zttBf&x. y F y^f 

ftfciflfcfllfRSrfflVvc. 7*-U y-tf-^N'^^yidJrSM 
TP7*— V>yF N mH£. machine@fqdn<7)ffMtT^)t 
■fl). 7* — UyffcillJ'—; Cl^^yidSrRadi 
us-Access Reuestfcjf A LT * - Aft^— / ^zWiWt 

[0202] 5 . Shared Secret (£3T<7)-fe3f a 'J T 
•< ) . proxy registration request tlgf^'TRUE (*) 

S'J#!2tE (&SE) JfC*v^«i<OflWi*i« 
[0203] 6 . Tunneling Protocol Parameters ( h 

y^yyyyuv^ivnyx-?) , z^m^y^^ 
7*-?tLxiz. mtmt*-j±wt<7)ffl. M.IHZ 

^-AIWFA^PPPHf-AXcT) h y ^;PtWr Sflfffi^* 
^iiS. a-*y/iyKy^fA(:fflvi5;^^-^ 
i: LTti, atfi^*^-9--t'y^lWF^coMt>'^-9--f 
y^iWFj&^^-AiWF^hy^. u y^M-rstff^ 
#iixs. ^^mii#hy^ucMLr. ft/h-cfc, ffl 
v^l>^# h y^- 'J y?'7°n h a>u<o?47'&&v:QBV> 
b y* u yy?u b a Mzftg&rt? m 

£ti\ ZCDMI& b y* U y^7"u h aAAJZiPtttt&Wi 
MT&iViwt ZOM^ ( tr) fc^HTLZTPh y^ 

[0204] 7 . Accounting Server Association ( T 

^^yf-f^t-A'ryyx-yay) . z<tm\&w 
nzi^x^ybi^x^fuz^jo^xrii-ny^r^ y? 
^-tz^m-htzwz&w^mzw^ &tzth\,zm 
\tit>ti&. znut. twst* yyyu ba>i>co%, 
m Wlli. RADIUS) s r^^yr^y^-r-^^DNs 
^itZ-ecOT^^yr-f y^7*a h aMzfflficoWP 

h#^<7)jlinW^7^<-^, IWF^'Radius Accoun 
ting7°o h ajUfolzm^Z Z t Sr^SnSit^-fe^f 
a'Jf-f. fx7^yf-(y^il, -fe-yv-ay 
/v/Uf-fe.yi/ 3 yid*^ifi^-&fc«)<JDi/-H (ffl) ^ 
*%Sill>„ Z0)TiH i 7y'T4 y^-vs'^DNS^Ji, 

ni^yfi yy*r-^<7)\?T v uMzmiRZti. iwf 

[0205] y^££ttoi!MW--b*,* 
rny\'-f ¥cr>igr&l±, ^coHDDJi, SliTQ-feXOfgfiE 



(35) 



mmW-l 1-2 84 66 6 



A*-y hv—ffytyyx—yy^'v bv—flz 
*- 'J yfit-^i, tfrffiL? FyxxAt 

t-b'X^gftfSil^ gJ^MSCp^HDD^fl^ tfr 
Po1(o-$y^) Ltv^xyN'y^fA^-Ati 
«<fl>tif$B£f#T*-A*>y r-7-?cDl£IE (^11) 

[0206] *~^*Av^f iv?y^mmz.n^-h 

X. /57-f^a-fMy^7x-X (graphical us 
er interface. GUI) \Z.m^<W&*m&W8<-$ h > i/X 
f AfH^t J £ <7)GU I £ ffl V HDDftOX y F 'J tfMUX^ 

i»t-t^7D/q ^fiffcSiifc ( h5Xf7 F ) 
[02 073 7*-'J>H^'f yf-'-f U?hV (FDD) 

i 0 s *-ASIf -f-A'ii. FDD*> £> 7 *- U y««r9- 
-/n'*5 J; 1X7 * - U y* >y F 7-? KN-f&'t?.* 
£JR9iBU hV-fcomE (1$aE) 

^-f'y^'iWF fc a i«Ffc <7)Pb1<t) h y*/i^£j£<9Jgl 

f - -r ^ s A I WF h +r- fy ?'I WF i: OHJcd h V 

y7-r ^u-yayf^iW. .rc7)FDDfi*-A 
afir^-v^Mscrtttia^-ft . i ofddi4*-a£|§-9- 

[02083 ^<mmz\m?<mmmmzft.h ■. 

1. Home Domain Name (*-AW^f^) . .101014 
x y H v-x-f A £ fpm L X V * £ 7 * - 'J V mW-f V> 
^ygffliFpM y&k-'&t SFDDityoxyF y 

2. Shared Secret (ftt^iUf^ ) . £*lU:7 

mtitt^zum mm) i-ztcMzm^bti&mico 

[0 2 0 9] 3. Home IFW-Serving IWF Tunneling Pro 
tocol Parameters (*-AIWF£lr-b>;/IWFOPsl£DF 

Ft~9"— t'y^IWF C0ISIT' F y *;P£fltj£"f 

i^iiS. z<7)fflli. fbh-ct, hy*yy 
/rp f ? ^ 7°^ i # e ®<o F y * u y ^'r a f 

*y yyru f ajUL2mztf-?&mwi3J:xf?-\i:y 
y\wt *-aiwf t omxtztP F yfru&m&tl fztb 



[0210] 4 . Accounting Server Association ( T 
-AIMFfci oTxy h* WfA tftb ->TT*7yf 

>W)%m mm. radius) , r^7yf ^ y?v—rt 
(WKS2,t5*v*<7>T/i*>yT4 yyruh^MzfflG 

(DWPtf-h^Wfrmw^yX-? . IWFjWladius A 
ccountingTo h n;H*jtzfflV^i 4: $rS*$n.-g.^ 
O-feJf a'Jf-f s f-xy^^yr^y^V)iSE. -fey 

(ffi)^*%^ni>. z.aiTfi^y^r^ yy+r-xnm 
s^ti. r^^yx-f y^-^N'coipr h'i^xt^n?§ 

[0211] 5v^CO-5 y^S^JfOteH-tf-t'X 
raK>f^^li, ^coFDD(i. a»7*n-b^^)f2IE 

(t«BE) tJil^tSfcrfflv^iti,. lyh'y^f^a 
M0)ft—A*>y yv-ifrhyx-vy^ v yv—mz 

-Att. @#<7)HSCF*IOFDD$:pK. xy r-'^X-fAtC 1 ^ 
-t'X$r^LTV^I.7*-Uy^ y 
tf^t#T7*-Uy^I2liE (^SE) £ff^3. 
[0212] £<07*-y y -f yr 4 i^MJtfJi 

T, /77^;l'a-tMyj'7i-X (GUI) CI^ 
<FDDl : Jl&^^-.g»„ ^XxA^#(iClC0GUI$-fflV^ 

THDDftoxyh o<nmm*m.m£'iT%o. titzt. z 

C0GUltt7>-'J y&SH*-y hy-^-tf-h'XToysW 

[02 13] *-AIWF(4-^ y^-^ y bt-txrn 
A^^f^7f'J (ISPD) SrfflV^T. te|S-7--t"X7° 

St. jDA#*^^-y FV-^SrfflV^Ti#<7)ISPtC 

y^ h U(a^^jDA#c7)isp^-r^xy h 
c^ffiata, isPD^coxyh'j^^MyF-r^. 
AiyF(ii(^)flr«*ffl^TJpX#t=ftboTisP^gMSi 

[02 14] ,TCD*-y FV-^T-dfx^^-A'tin-* 

y^*ihK-f-r*. sis^ia-f-t'xrn^M yo 
*»if-t*^7*o^*>f yy^wrm. 
^ff , o : ( i ) mkcn>m&*)--\LXTuju 
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[0215] imA#*W y?-*y ht-h'xrnA^ 
?T-*r?f-vfcL -f^-*7 F^-t^ro^M 
*<y h^-^T-dfx^f-^fi. ISPWPPtf-ys'^cofl 

tf-^iHerc^sw** (o^o. ppp, Lzr 

P. Radius^^To F FT'£ 

-T&r -f F 'J <9"S"I$T*K ISPfc tfDHT^AOJfiff 

[0216] 2^<r>^m.^-\-xy'u)M y<?MX'\i- 

*>y hy-?frt>Zcr>*y Y T 7-'7\,zm%t&X-V Vis 
ATMZttthm%E&£V%$m®*?#- hti tztb 

y y y-f-f f? f 'JfcA^-rs/sftcoffiffiosai 
£fT&7. i^^rffiTIi, Zti^j U?bV<?)9mco 
JSMli. &V-fx7uJU fcDVmmizX^X^MX' 
'tthtih. mz%-oX*-J»&£Xf7 *-V yb*4 

y?4u?hv pwm&zmm-z z. t o fc 

u znbn3mz^MX'T4i>-?hviz}j]-t&. 
[02173 tmommmiz&^xi*. r<u?h 

ra«on- = nrggfc-f «, t t ttc, isp*«p-s y 
rmmzmmiz'm&ivm.i' & z t &*imz-t& 

mmW)ffl% (developingstandards in IETF) 
[0 2 18] T1l*7Vf-4 yfT-lKDHmbZ^X 

^zTwy^iyfwmwm,. mm. t3xvm&- 

[0219] tt#^H5fi^H:fc^T«i, 4 y?-* >y F 
if-t'^rp/NV y<rM\zTij*7y*r4 yyv^i- F£ 

aEM-fSIETFS^S:^ (developing standards in IE 
TF) ***>y F7-?T-*?-?f-*rtfcfflA&*il. IS 



[0 2 20] •/XfAy7h7X7ll ISPfc<ktX7*7 
-f<.— F4 yF*?*? Y»<P)T9*zW?#— F$\ * 
— AIWFfclSP^Jb&lf^i-^ yh7^7 hi7)PPP-9--AO 

h^-fXTttK-fyx-f l^F'J (ISPD) (i N IWF# 
f 4 V? F U liiit-fx/DAM ^<7)fti£HfcJ;o 

SWjftTti-f y^-* -y F-9--h*X7'ny^ ^tcr^-b 

h (-nzmbh) #mcom%wi&. z?)&>mm<7>v 
y b^^rxuiRhti^^K n&mztez<7)V7bT7 

mmz^h^xm^^. mxmtnsp t mwtv- fx 

[0221] y^fAIW-y hy-^^S^^Ii-TI.^ 

. wn^mr-r v ^-y 3 y ti. 7x7*7*5 ^ 

if±T'7ytl>. 7x7^ 7 7f?rfflV^, yXfAf 
^{xTCP/IPT^HrX^^ffiS^FJf*^^ -y F 7 

MP MIB (Simple Network Manegement Protocol /Manage 
ment Information Base) 5:X^X/-tf— b~fh „ 
[0222] ±{4K;K7)SNMPV^->>X± S SNMP F 5 

-/r^Lxm^^m^m^tih. tmsowsm? 
v^—isvte^mz^mv^-z/^mmz* -y f 7 

>! <?)±e F- ^/l^OSNMP V ^— c7)FJtC0 v X f A *fa# 
"4, ^-y F^-y-COTM ayi/THfyf-ya (T-f 

3 yc i § * -y f y-tmt) t *0m&<D¥&tfS&i 

na-f 4 i s . ^ v f y-^ s*r 3 

y£;"MyFU y^-rS^k-C'. yXfAflf 

(4, 7x7'7'77-9'?i-ffl^-c^'i ; ar7-u 3 y 

[0 22 3] ^«y F7-^P«i(C*J^Ta. ®imt££Tf 
m®.m*v bV-f^mcO^MlZ, SNMP7*n Fn^i:|*i 

wmmry^y--^ 3 yruyj s y^>f y^7x- 
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>- 3 y(iSNMPi5I.O(i;ftec7) < tIIAPI (Application Progr 
amming Interface) £fflWC*-y r-7— 

[02 24] 7-^x7^-h(i. MIyXfAC 
li20<7)#i&S-fe -y hc7)«^l?^%tni,„ H-cO-b 
vh^^Stcti. n y 7 ^df\ii/-v a y-r- ^-f 

*1 . £ ft ^ «R AI Dt> * ? £ tfl I> H A->f -y S±T- 5 y-t 
Sj|-?>fe.y hWMtmmim. Hfflc^-HA'gliy 

g«V*-y> yXf^AWit^r -? tz^kaX' l> . 

&ttiL $£>ctx. ■t&mtf.mzmm-t&zktf'cz 
&<, fc*?U ^x^ar7°yv--^3 y(4^-HAo^ 

IT?*-y> fiTHfir U W^^-^'-v*^ 
[0225] a^rt^iS^Ny (WH) teAMWWiM 

gt-t'Arwu/ (wsp) izx^xm^zti. zti 
^(iwsp^li-t-ys- (rs) y r- • y*7 ■ 'J y 

7. Jyby^ yb. ife&VW HCj:-?T 

•/•9-±-cnff t . m-ofrnmmmzm'fft h v 7 r- ? 
x7^y a -m^ t a >?-v-*yymm3-- y 

h^xTtyi-K-ibl.. iWFJx-.yhfi. ftMW^ 
ANfli;:{£MiM> ; £gU:ftv\ mmmzii. TX^yf-j 

yy*r-rtt5 xv^j v uv-^a (ru-t -y-9-± 
x-m^h y?h 7i7^ =Ja.~>vh^ibx ) m$v- 
aic, •y—vxyu/^ y<7)T-?-ty? (mz-ix. m 
^^-^axx/mcov 7 h >)x7^*x b-tz, — oh 

xmmzti&» xyFyxf^^h5t^ii (^ 
wimztmztitz) >v-?zftLx&m y?-*y 

r-Sv^ilSPtfM yby^-y MCA— r-$tl& . 7*- 

v ywspcT)* -y h 7-7 ftwaa-r &s$i-9--A{27 * 

- 0 y%m--' < ( FRS ) fc Of u\ xyFi/XfA^* 
-A*-y r-7-7 (^■^/NMyW^-^-b'X^.iiA 

~tm<7>*v r-7-7 ) mz{mt&&B-v-s<iz*- 

(HRS) fcnf^c. *-M7h7- 
7FVM y^-^ y h7-df y^fg-x- .y Hitf-A 

iwFfcn?v\ 7*-yy*7h7-^ (osfcDxyny 
7.TAcol6r«.1^^ y hv-7) pW y^-y-^y 
^JSfgjL- -y h- (i-t- t>7*iWF t Df^„ 
[0 2 26] H^iSll^-h'X (o£9, ^iSL&v^x 



bV-i/^-t'X^^T, ^-A^-y bV-Vfrt, 
(0>li.(i\ T'y r-tf— A-?— 1"7. : at home servic 
e) , $>!>V^i7*-y y*-y bV-?frh 
a-S//t-t'X : roaming service) X 
yr-'y7.xA(i#E|SyN7rtcox-y'xyb (fyUfcf, V 
7h-7xr^riiii§fL^x-y'xyhatg) j^&ft 

£fx£ T h'^N"^ X^< y h 7 yMrjtLT 
gfrri>. MACii(7)SI4i:^-y h-7-i/ScT) 

[0227] ^-A(Cfia-Tl.xy Ky^fA«^ 
(132 3) (i. ^>y hV-^JfcT)^ mUZ. 
yi^^Sif ) (i, ^-Agff-9--y\'^xyt<^7.xA^il 
ft^$flTV^S*SI^7^»4>-ti:l>„ ;c7)*I^-(i. x 
y Ky^fA«*- A^t-y hV— ^F*]OIWF^7y^ 

-t^^-AlWFfc^rl,. z o LtxyKi/Xf 
A i: «r H 1-C-gSS PPP7 1^- A{i. iil|/N7'^ ft L 
T^-A^>y h7-^rt^-AIWFtJMA,ft^, <> xy 
H ^Xr-A^-Mz&M-tim^ *-a lWF{i4gH 
^7'(CXTunnel 7° a h 3 ;USr ^ LX mW. % il& „ 

[0228]7*-'j ya- 5 y ^isia^- b'xto*!-^ 
(132 4) . 7*-uy«S*-A(ifi»7i-X«B 
Co-Sy/xyKyXr^-A^-y hv-^coii 

V-'Mtft-ASItV-rtbmm xy h yXfAW 

fc. ^-t'y^lWFSrfJO^T. *-AiWFfct?--b'y^ 
IWFt COffllza- 5 y/xy Hv^r A^^tCl-XTunn 
el7*o hriyH»a[^l|4i-S. ^-t'y^IWFtiil^N 
7*fc*-AIWFi:<7)|^T7U-AS-i4ij|i-r^. *-AI«F 
*^T-^{iPPP-7"-^' (Oi0. *W y h • 7>7 • ?K 
-f yh7nh3;Hf-A') (cJH^fi^,. i^PPP-^-ys' 

^a#«ppp^-y\'S:HFr^-r ybj*vbbh 

\,misp<D4 yb?^y bizmtbtix^ r 

-^{iLZTPTn h 3;l/$r^r L-CSiJffl(7)PPP'>?--/N'lciM^> 

Tpaw ^fc{iSiJfl|<o>f y^-^ y h-9--h-X7°nAW 
^£ioTJ*#*i.J:t/jIfflSfi&. *-AIWFi:PPP+?-- 

^N'cosamr -y y 3 y*m txmfeztifzt t \,zt ft 

h. MACScO®Ht^>y b7 &z\ 

tx\ m;m<^mt*vb r 7-'?m<r)%®ff)tztbi l zm 

^/it. c:ix4>gii7 , o-fex{±^t=5rv^^ WSP<7> 
&.ffibtm%mF Mobile-IPtlhK-r'^iflltfDiai* 

[0229] mT^)3o<7)r-7';PS-ia^ 

-7 , ;H(i#3^iyy g y #xyh'i/Xf 
A) S:3^^y g yid (CID) tCTliS'Jt. 3^^y 3 
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^idSr^^tefS^rA ( WM ) ayyYV^ (o^O. x 
#i$f^7'(WH) fcB8E-f&. -t— '77U2t±#3*?>' 
(7)id (XID) fcHBIftftS. T-7>3fi#4 

(7)7 XTunnelcOid. fcJ:VlP^-h ( IP/tK- 

M fcWilWt-So ±$^x-7';M*]?)xyHJ (if 
g) lifCtt'^ Ux^l»fj^£>g&iS@W^ 

[0230] 
l$kl ] 

SI : A P K i> 3 



CID 


WM 


CI 


WM1 


C2 


WMI 


CI 


WM2 



& Z : W H C 5 



CID I 


WM 


AP 


XID 


CI 


WMI 


API 


5 


C2 


WMI 


API 


5 


CI 


WM2 


API 


6 




WM3 


AP2 


7 



^3 : I N H- \Z 43 \1 Z> 

mm?-?* 



CCD 


WM 


WH 


XID 


IP/Port 


ct 


WMI 


WHl 


5 


IPl/Pl 


02 


WMI 


WH1 


5 ! 


1P1/P2 


CI I 


WM2 


WHl 


6 


1P2/P3 


CI 


WM3 


WHl 


7 


IP3/P1 


C5 


WM5 


WH2 


8 


IP4/P1 



[0 2 3 1 ] 02 5-2 8(3, *7h7-^rtK/>f 
7;U7 •yT^-Sa.— if N Mt/C n—S.yfz.—yiZtt 
•fSrohn/kX^y^Sr^rf. H2 5(S. tf-i^H 



y^-*«y h7?-fe7.£*fLTffl^-g>Tn h 371/7.? -y 
7 Sr^-T . £ oata&TH: . PPP7°n h r?;M . y -t- ^(i 
tf-AlWF (H^Wfc{i*»vN7*i:R-^fiafc:B* i it 

^-*>yh^)BlT"t«<IW*. H2 6Ji. *-A<D®5£ 

J>b7* v YT?^X (oiO. >yh&l> 

•y 7 *7Kt. ClcOliJST'ti. PPP7°n h yt-'J 
li*-AIWF ( jftSW^{iilllA7"i: ffi-tftfastfiA* 
#14) SriltT&ifcfeISM Vh5^7 h*£V*ttlSP<0P 

wmm*<7)^v\ ii sXT~Mz£z>w&'{>?-*>v v 

77 -txKft LTffl^ t>ti&?n h n;kx 7 >y 7 £^ 
•f. ZVffi&X'lZ. PPPTob3;Hi*-AIWF (HMW 
£{itf-A * y h 7- 7 O ^ A'-f /i^c}&-te y 7 fcftg 

7h-y^(i^-AIWFtjDi.T, -^-h'y^IWF (AMW 

wmw^t m-?){mizm>ti& ) %i>m&ztiz 

XyHyXfAWSiJt-h^f yf7*7 h77-te7. 
(O^O. SJfcfciW-y h&l>^(2ISP'\077'lr7) 
KttLTffl^£7c?h 371/7.7 y7£*rr. d^fiSt-C 
(i. PPPTn b 371/7 'y^-i/U^-AIWF 

h) iMtXfim.±M^ >h7*7 h^WilSPOPPP 
•»f-^'lc4i|i$ixl». 02 8(c^-rj: -y-fe-i/h 
5b-y^(i^-AIWF(Cjn^T, -^-fy^iUF (AMW 

izimw m-cD\mi,zw.frtih ) zi>m&z\tiz 
m~*xhMzitLmi-&t®&. foMm-?yt°3L- 

? Pi ^7"0 ^ 7 A § fLT V ^ m^ii % "tf - t>^I WF 
teH^7'i; ^(CXTunnelTn h h y ^ 

[0232] Cft^TQ h 3;^ ^ -y R^=5r 
ft#i>«rtgT'^l.„ ^IJ^.{f. RLP(i-|)--f y^IWF^§V^ 

t^rlP^-y by~7±£Ml£ti&i%&li. RLPrn hr/ 
ySUx-i^g yfc LT(i, *H^7'fcIWF^rBlc7)Xtunnel 

it. >&?Lt>wp/ip<v±mzffim-?&&m < %:\,^ztx-- 

foh. -7^*9, XtunneHiFranie Relay/ ATM linkJf£IB 
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^Xffimt&Zbi>X'Zh. tztzL, UDP/lP£ffl(,^7f 

[02 3 3] 4oc7)^-^rc0>'NyF^-^v^'J^« 
•fSCli:*^^^ .rfi&U:. -Hmu (i) o- 
^tt'^l/f-f. (ii) V-^ ?n*f4 Uf-f . (ii 
n^^Dtt'^Jf^ fciV (iv) ^n-A/VErt* 

PP-F-y\'<ofig(i^$ft&\,^ h»ffc£$ffl-t 

§*^c7)i d — wmmmiz&^ziz. ispwpp-tf- 

{ci^Bj-ts. jni.T. 7*-yyS$|->/-y^iwF<9fi[ 
M i «^ 3 oco v^- U ?T fc £ v vc (i^S $ ^=5: v \ 
[02 34] »ft $ fit IETF Mobile IPW, x 

*-A-<f 7"*y FpV)*-Ax-^i y b^m-fhc\ 
t . C\ -fe- -y h ftX* 

(Oxy F yXfA i: c^m&fcX'fo &%HlfT V VX £-§r 
tf. h5ty7#\ mil$. ISP#^x>-Ky-7.-fAk: 

y^rAKiW£>fifth7t 7??:, cn^-^t7 
* -y h £PJ* Lfc i: § B% L . <H O h 5 1 >y ^ 

r Ku-xjofiaw £ . ^mfiw h 7.12 7 *- 'j > 

If?** -y r- ftcrmfeO? * - 'J yx-y'i y h Sr^iJ-t 
S. xy HyXf a«7 t - U yx-y'i y iy 

ilX-vxyh) rtfcftittSifci**. Mobile IP 

K^fcisvvcfct xy Ki/xfA^x-yxy 

K iyKWfA«*-AX-y'iyN, tiXXfJl— 

(ch) <mx-mffl* v-t-vm&s&tih. 

[02 3 5] Wi^tlX^him Mobile IPS^TIi. 

y?-*-y bftco-kXO&MfcttLXBMbZ 
ftSMMfc £VA y-y h* 'J f 4 £Si£-f & £ i: lifflU 

*i£ i. ^ fc h . mm ( mm 

tV'Jf^fiii. IETFtioTKlS^^SMobile IP 
WWCtJlvCfflV^fU) 777 h&*tittt>. (Cellul 
ar Digital Packet Data forumtC J: ot7>^yt Ztl& 
mmzm-K ) CDPD^Hr;P9i'7xTAfc::fcVvtfflv^ 

ft5t-t>y'/ry*-^ y^-v-^y^fgi: t 
ft*3>. 

[0236] H2 9(3j?4-J:3£, D-^t'^Jf 



y-XfA (mobile node<?)l»"C*4MNi: LTScf ) 

xbtmmt. 

[0 237 ] ZCD%itl%W (Oi 0. xyHWfM 1 
^li'J^xxh^flL^AP) Ii, ||«3^y 3 
yf-^rtdSfc^rxy h 'J Sr^jjicL, -y-tr- 
i J£&McDmW^7'lz$>fflttZ>„ n-^;^t'V Ur-f 

xyKyXfA^fi^X^h?:, MACK 

^comity ?x* h-cft* t<o4:BaL, mau'NT'tta 

#oa^^y y a yx-^SrCl^Jt^rAPSrKW-r-l) i 
3 tcSfr-T S . at . iil M tOAPti . @ #o n is 3 y 
r-^l^»4>filt»^)3*^ ysyxyh 'J Srffll^tS . 
mmf^»AP^xy h y stllwcy h l) *fflHrr*fcftfc 
Ii. ^£<fct>tf:tf>3o<9#ffi. oi9. (i)^^fA 
T»> h L^r # , ( i i ) «rfe*AP*^*ia/N7*fc:tWiS 
flfcMACJf T V i^x- v 3 y ^ -y -fe - 'Jcr, a f - Sr 
Ltzt^ ( <Itf)4'»b< >y ^_^i 7 'n_ Y^r hX y 
•fe-i^C***^-) . *4v^i (iii) Haft'NT'icJ:* 

xyMj zmm-tz wcmm%wz t # . nzwmth 

[0 238] H3 0fc^J;dt=. 7^ntt-( 'Jf 
^ /n>- H^-7(i. |5|-^#*-9--A^S-ri»illSA7'rBl 
WXyFy^fA (mobile nodeOH&T'i5SMNi: LTS^ 
t") <mmx\ tro. xyh'yXfAA>'13lii: LT^ft 

t>?"lWF£ J: oT» pit &«3l*a 
3. 7FV\^^ y F Wc^rilA/ii,^ (*rfe=Sr 
WZMtX) %mZti&b. xyFyXfAli -e^S 

i^-y^osiisr 'j ^xx h-rs^ y-b-y^inm-r 
i^>a»y ?xx h«ir^^AP^ii^^ftEiiA7^ 

[0239] &®&-/v&M.cr>w£ttim^z> 1 1 

tfX'%&Z\b* : ik'fct&t, Slf-^-y \'(ibui Id XTunne 
1 Request message ( XTunne 1 ff^ifff X -y-fe— £3g 
^IHFfciMS; fcT, iI^E^OIWF^Cif7t=5:iE|ty^ 7 ■•^- ( 6] 
tfCXTunnel ^WSSth d Srglf-rS . f££, 
— y~\{itear down XTunnel Request message (XTunneltJJ 

WF^UlM^tellA^h^PB^igft^ XTunnel ^flJBrf & 
itSrWff-r-l.. C<0buildt5ilXtear down XTunnel R 
equest messagefi — D<7)yt >y -fe — >>'t;|g-^-^- &Zti>T 
y* — Vy&&-9-— >*n"{4. -9"— b'y^IWFi:*- 

[0240] IWF*^positive build XTunnel reply 
(•g-SW^rXTunnelM^jS^) ti J; Vposi ti ve tear XTu 
nnel reply ( "t^W^XTunnel WHJ&§ ) SrSflf S 



(40) 



1-284 6 66 



[ 0 2 4 1 ] ifcfc:, a$rtr-AJi N relese message (Bfl 

H^7ti. relese message Sr^ff-f & t . 

y a >T—~?Jl'b MAC 7 4 y^7K y7x-7Vyfc J;t>' 

imwwcD-i*? y 3 yx-^^Sfr-ri. . 
[0 24 2] 03 lfcjjrTJ:3fc, 7?Qtt^ 'Jf^ 
/Ny Kt7«t-X(J, 7t-'Jy*'yh7-^^t 

(gf^APSrii tT ) T rW-f 7o< y r-#gfl£;ft.& 
fc x x>-Ky^fAli*7 h"7-7Jf?>af££y7x7 
h-TI.^ -yb-y'^a^-^lWTjlfl-f <I<0 

[0243] aiHWN'ti. iy HyXxA^igfttfOg 
jf-tfw \*<9* -y h 7 - 7 tcS $ &v . g ##7 * - 

y yaii-F-; n"C'S> h t mm-th . 7 * - y yan-9-- 

Ati x ijmh, #r£L<ti, Radius Access >J7X 

7h (RAy^xxh) fc^-yy^u^hy-tfwx- 

-t'y^'iWFfcLTSiJO^T. ai*U7x7 
K $?£L<ti. Radius Access'.) 7X7 h- (RA'J7X 

xh) z*-j*%My--JVzmmt&zitx\ 

IJ^--y N'tefrfc tciStRS tefc I WSr jijJrt-4 . 
[0244] *-A«»-9w«i. y 7X7 h . n & L 
<{i. Radius Access 1 .) 7X7 h- (RAy7X7h) 

-atw V9Y v~<r-'Vzmz>z.tx\ a$ty 

SrlgiE (g@E) -f ally 7X7 r-#§2fiE$i-u 

imztizt. #-A«iwwcut, *-&\wizttL 
x. mtiizww^x ^tifz-f~t'yy\mz^fxWz 

&I-XTunnel fcttSfif 4 Ztt. Wff^-t'y^IWF^ 
COS4c7)I-XTunnel £«J|Br$-& <I 2: Sr*^t£ . 
WF#>£>positive buidld I-XTunnel replay (-fi-JgW&I- 
XTunneHfliJSg) ^positive tear I-XTunnel rep 
ly (ItSflWrl-XTunneHaJBfiBS) *- 

AS^^-y^i. 7*-y >mm--;<Lzm§t®&£m 

[0245] -tht. 7*-y vm^r-m, mwz 
m*)%x &*i*:iwFt£*t lx s mfcttew^izftifxii 

Tunnel Srffl^S ZLkZI&Ft h . positive buidld I- 
XTunnel replaySrgff-f |> t , 7 *- >J ySIWwfli 



£lfifc>IW(CftL?. Utfl<7)*ll^7X<7)XTunnel £tJUr 
■f &££:£fg-4H" l>. positive buidld I-XTunnel repl 
ayfcitf positive tear I-XTunnel reply£gfi-tl> 

t , 7 *- y yftaw-^'ttxy FyxrAteilJC^ 

[0246] S#i/e^^^^r*E||^7'fc5iJ^S t . 
Wz%%m>\y'0M<F> n ^ 7 y 3 yr-^^Wc&AP 

T H U^f- 77M3 i 1/3 * ^ v- 3 y f — 7>SrKir-r 

[0247] iJCfc. a«W-^^4release message (BU 
^•y-fe-y') 2rmpro*E||yN7'tj||frr^ . *lll^7' 
^'release messageSr^fff h t , -IfUi, §#^03^. 

y 3 yf- 7>fe J; VMAC7 -f /l^7* H l/^f-^k 
Sr5EttU, mff^APti. m<m&>^frt>Xv-b-i? 

y g yf— fiv^m-th . 

[0248] ^'a-A/i^ety iJf-fAy H^7c7)7-— 

o . 03 2{i*-AlWF{i^§ix : 5rV^-^<7) J ?'o-yN' 
yuth'-f Uf ^^Nyh*5|-7^L, H3 3{i^-AIWF 
t^^ii-S.JS^O^o— yc/^ t** y f -f Ay f^7 

^7"*^ (frfc&APfciltT) TK^-^-fX^yhSrg 

h -r -&^< -y -b- y'SriT^ 7 =j— y ya$i-9--^ 

7*mxmtz%7 *- y yaii^-^'t^^ns . 

[0249] SSlJwCfcL xy H J/X^A*qKEtf5fi 

y y a#i^-v N'-c-fc h t imt h . 7 * - y ysnhf- 

^'(i. y^X7.h. W*L<(i. Radius Access'J ^x 

7>f (RAy^xxh) Sr7^--y hy-t-/s' 

-^fifiW--^'<OiiSiJSrl.o{t, SS^rlWF^-9- 
-h'y^iWFfcLTSiJOiT. -e^, S8'J?x* 

*fSL<(i. Radius Access y 7X7. h (RA'J 7x 
7 h ) 2r^-Aa#|^--/\'(c^|, ztX\ *-Afi»9- 

[0250] tf-AaHWwN'li, y 7X7 h , L 
<(i, Radius Access 1 ; 7X7 h (RA'J 7X7 h) 

-A^-r u 7 h y -9--^\'^jMs ; fc x\ a$f y 7x7 h 

Sr!2II ( IfcaE ) f S . U 7 X7 h ^fgtl^ti , ilffio^ 
(113 2) , *-Aa^-/N'ii. ^-AIWFt^L 

t » frfcfc 7 * - y y a#4-9--^ s : t j; x ffitz tew y s 

T ^tt/L^-h'y7'IWF^[6](tTfr^: ; 5rI-XTunnel ^^Slg 
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B'J<7)7 3t — V sMZ de-registration message 

-h'>-^IWFA.c7)l^frcoi-CTunnel Sr»TI. d k 
T&o A I WF:fr>£> positive buidld I-XTunnel repla 
y (#£W& I-XTunnel 1fS§)Eg) *> itXpositive tear 
I-XTunnel reply (W£W£l-XTunnelWBMSg) 
"fSk. *-Agf^-ys;(iregistration reply (®H 

[ O 2 5 1 ] mz. mtitt:? * - U yg!Hw\'li, ff 

ttTXTunnel£ffi§-tl>C:k£^H-|>. positive buid 

Id XTunnel replay ( if £W&XTunne lff^iE^ ) 

-Tl. k , 7 =r-'J y^i-f-^lixy K v7xA(C|fitft 

*ci»-r* k , #r£&MilSMN70ffi<D3*7 v 3 yf- 
-S^WWIS*i» af&IESFtfxy FyT.-fAfc&jMSft 

[ o 2 5 2 ] mz. imv>y*-v y%mv-'M. a 

h <£ 0 fcJa^-f & . positive tear XTunnel reply (if 
Jg^CTunnelflJBrJEg) fcglTf* k , ifcSWitear 
down XTunnel request (XTunneH^Kfr "J ^l^ h ) 

Hfl?)#Bil^7£release message (H8;SfcX 'yfe— £ 
jlfrf S. VMm%kW ^ 7 ft re 1 ease message Srg&f 
&k. £*Ui, a^<03*^^ 3 >f— 7;W3<ktrMAC 
7^;P^THUX-r-7;US:^rL, iilfycoAPii. gj§- 
<7)MAC7 -f y^TF W-7x-77kfc itf 3 *7 y 3 yf 
-7^SriaM^*^N7>^^ >y -fe-v^ft Lfc&fc: 

[02533 flfctu H3 J; 3 tf-ASIW 

-> <tmtz %y*-V y a«-9--y n> 'J^xa 
MiBSSflfc**, Jill«<9tf-AIWF(2JI!V^ £ k 

£&*-AIWF£jH$RU 3?r£&*-AlWFfc*fLT, Si 
ft<7)PPPHf-ys- (tfiRtif, S8g3*ifcISP>f y h5*-y h 
pWPP-f-A) (cipjffc, \"OV2 F-y^/Vrnhr? 
/Wci&r-y*^ (o* 9L2TPr-y*/i/) fcflBRfSi 
k£J&^fi>. 

[0254] mM<7)*-A 
IWFtttLT. -eOLZrPhy^h^b-y^^ifjt^* 
-AlWF(clKiM-t*CkSrt&^t4. ifcfc. *-AS 

y >-shw--/n*{c x *> xwz \zm o t>titz*r- 1> 

^I&FfclWTSrfc&I-XTunnel Sr^-t S £ k fcAHW" 
zfr— Aj^H-tf - — yS'Ji N de-registration me 



ssage ( mmm* zimw 7 * - y y«# 
•9-->N*twiii(i-r§kktc ^-aiwf^lt. jaflr 
«7*-yy*7f7-^ c=otlmr<50-y-— t* y ?\ w\cr> 

mWl -XTunnel fcflWrt* £ k . *-AIWF 

fr>£>positive buidld I-XTunnel replay (if^W&I-XT 
unnelf§^j5^) £ ilfpositi ve tear 1-XTunnel reply 
(W£W&I-XTunnel«5 «) SrSfl^k. ^-A 

SiJ-»fws(ig#ij[E^^fT^ : Sr7 *-y ysn^-^'tz 

[0255] -f&k. «rLv^7>r-'J^Sii+r-ys(i s 
jKfeKWO it ^ii^lWFfcitLT. 0i/t^ii^^7A 

<0HunnelS:flKB-t4;k^^-rS. positive build 
XTunnel replay (ifSW&XTunnelffiijiE^) ^gff-f 

§ k , 7* — »J y^l|-»f-A(ix y K v^f- A(c[6](tT 
IrflJSg&jIMTK ail«^fr^^te||^7tiiM 
k . teW^ycoffiwa^fis b yr—ylvififfitztc 

mmm^y h ^XTMzmm^titim^mi- 

[0256] im<oy *- 'j ym$r*t--><a. vmmu 

WZM IX . Ulfl C7)*^y N7Xc7)XTunnel flJBrf S ^ k 
Sr^-fl., positive tear XTunnel reply (if^W&X 
TunnelOTJE^) 2rS^tTSk*4V^itear down XTun 
nel reques ( XTunnel WBfgff) tmm^&COt |5jB# 
C 131buc7)7* — U ySII^—^ ^release message 
( HMM >y «fe - i^* ) mmfcotef^ n 7lC jlfi-f & . felffO 
iE||A7(SIB^ •y-fe-S^gft-f £ k , g#^rj^7 
ya >-r-7/W3 JtfMAC7 </^7FWf-^ 
JgfrL. laW^APti, S^MAC7^^rHU^-r- 
7;Pfc J: l/r? * ^ >- 3 y 7VU & JafftfO*!^ n 7*^ a, 

[0257] «:Hot«§^xy Fy^fA 
fiIETF#IJj£-f SMobi \e-lPmmt,zm~? XffitiLZiXtz* 
•v kfflSfclMFt'^ » IETF*ttfcS-f SMobile-I 

PWPtct)!o T^^ix^x y F y xf A i 
[0258] *%ffl*>*y h 7—7 k IETF Mobile-IP 

v^tfO^MLT, IETF^'i]§-t|,Mobile-IPfI^{i. 7 
7>y h*»JS*ffl^-6. ^BJ^^-y h7-7tCfcV^T 

7) fcfcfLTti, *-y F7-7K;U<?D®l|{i^k$ 
il^V^ 70ntt'^Jf^ll ff^^Xtunnel^IS 
^kJ^M<7)Xtunnel<7)<DBrS:ffd„ ^'n— ys;^ f y 

/S*I-XTunnel<OR3ekJ^tir<OI-XTunneltfDflJ8lr*fPd. 
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^n-AyVEtV y-f-fii, #rfc&L2TP Tunnel C7)|SS 
tiJ:l/J^fi^L2TP Tunnel $ff fc&L2TP Tunnel^\C7)L2 

[0 2 5 9] (ii)*^BJ{i. LUE-t^-Wr-yT" 
J--1f*»S'rt-S3tibt=. «f£+«« (realm) $■ 
fflV^S t<0**LT , IETFj&HB#$-&Mobi le-IPMMtil 

«IETF3&«ae^6Mobile-IPWrC(i*-Ax->;xy 
le-IPf|JrcJ±7 * - U yi-y'i y h t J: o T fciftTr 
vvcii. fittttttttfittr?-- y^ioTit&fTSfu 

[0260] (iv) *milt. PPP-b yx 3 y^0 3 
^h^^ffil^. XTunneHi. *§»A7*i:-tf--t* 
y^IWFi:c7)^(7)link-layer tunnel ('Jy^Jlr-y* 
/P) tiOi£V\ -9--h'yj?'IWFt*-AIWFi:^)rBl<7)l- 
XTunneKi. IETFfr'&St~l>Mobile-IPM*<y)*— A i; 7 

^ — *J vx- y'i y h t cofflco b y*Mz J: 0 ifi^ . L2 
TP h- y ^;Mi^-AiWF^"PPP-9--vs-C'^rv^I-^lc<50^ffl 

[0261] ( v ) *»wci4, * -x h v-?m<nm% 
tePWt-yi'BytfmiikZti&mzmL-t&eoiztti 

X. IETF*>'g)^-ri>Mobile-IP^T't±. Mobi le-IP<7)^ 
ftli. PPP-tr -y y 3 y*<^--ry*e!8fc:Ao Jtacf6^ 

(vi) *f6BflT'{i. x-i/xy hTFA^X^y h£ 

»a/) (i, xyFvXf^<7)iSffUy^±^{i^ 
ft V vMzn LT, I ETF#t&&f£ Mobi le-IPfPd"C 
(i. i-y'iy hTFA'^^X^y Mi. TTL of 1 ( 1 

<7)TTL) i:*^*^ intixyKyxfA 

#7 y yx- y'lyht mm >jy? zn-oz t &s 

yMi. IETFtfiJS^SMobile-IPm^^OJ: 3&I 

cmp/i^- ? r k ^ * -f x* y h izHtl WMXi&K v \ 

[0262] *^B|t: J; |,xy K y^f A(iX-y x y 
bM$Z (agent solicitation) hZ £S 

■t&Hobi le-immzy-x- h-rs * 7 f 7-? £8*ra 

xyF y^fAlix-y'x y F r FA? >f X 

it. xyb'yXfA^, X-yxyhTKA'^^X^ 
^h£SMi&i$ia7U-Artfc:g1IL5:V^, xyF 
yXf AliX-y'xyM$ (agent solicitation) £ 



[0 2 63]#fMHfc:*$lrVCtt, *7f7-?Ifflf 
IETF*«-f^»Mobile-IPp^^-9-,-K- F"f Sffil?) 

2r*ai-S*l%^fc: J; &xy F yXfA(;*-A7 F ^ 
xzm 9 fcixS i 0 fctttt?* <r fc #T ^ S . *J6 
qflox yKyXfAtt. x- y'x y F T F'y < ? A X* y 

[0264] lETF^gj^-rSMobile-IPS^S-t^- F 
•f£*-y F^-y^^ii, PPP-tr >y y 3 y#, Mobile- 
iP^SIi^ff^^Sii. my—rt\t*tit><r>*>y V 

v—9 tuny * - u yx-yi y f t m—<7)&mi l zt>& 
i>cDtm%.zti&. -mmmmizio^xiz. snap^ 

?'£fflWCPPP7 U- ^^mmkCyU-MZ (Ethe 
rnet7 *-V -y h fca«TT4*ifefcr ) ^7 s -b;Hk§ 

7)T- l Jyx-yxyMi;W^-7 7 hS-prop 
rietary PPP format over Ehthernet encapsulation^' 
fo&btm??>. ZoLX. ^HHti^xyh'^xf 

Oft, 7t- l Jyx-yxyMi 1 I-yxyh7FA 
^ X^ y F c7)51fl £Pl#iU *^Bflcox y Hyxf A 

[0265] IETF#iftS-tSMobile-IP^£^'-K- h 

XmftTZ iZ-t&tiMzli . ;MtAWyKi 
y Fy^fA ) {i^< fc t^fM^MACJf£0l!#i^iiff 
X'% h Z t tf£%t Ztl& . *5%BJox-^' x y h T Y 
t <f A XX y V X y -b ~1/<T> 7 * --7 y h $r I ETF*<tfi^ 
-f SMobile-IPH^x-y x yYTY'<?-4XX y h 

^)*7 F7-^CIS^nxy F'yXfAli. x-^'x 

i t nfflm ttch. *wnc?>m§ o 9 xx h *j i 

^ .y^-i/(i N IETF*«tft§-f SMobile-IPlUIStOfift'J 
^XXhfcilXj^^-y-fe-xfc (^g&feSI&Uc) 

*3%Hjjtf>* 7 F7-7 fcl*|SW-4 xy K i/X 

[0266] IETF^'tlig-rSMobi le-IP^£"»M?- h 
tSxyH v-^xAtiMobi le-IPSIi^BU fcPPP-fe -y y 3 
y*«$*t-g. £ fc &SB^N-*/s Afc: . *^Bj^te||ys 
7(4, :*7*y3 yi: LT, MAC-Ji^aH^atPPP^LCP 

(Link control Protocok) y^y NJoiV'NCP (Networ 
k Control Protocol) Wm&mkt&Zb i> 

X'%&. 

[0 2 67] /\yb*7<7)mzhyt -yftfikhtl&cr, 
Zmm-ZtiMz^ *»Bfltfo^h*-f 'Jf -fflli, 
?t*7*77l/-7 (make before break) i:V^d$fc& 
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3rT7V— 7 is 3 y (make before break connec 

tion) (±. mttmzx^xmw^z^mzti&mc- 

iz&&&&m< Z t , xy h ^XTA(-(6]ft 4>ft 

[0 2 68] 70att'< VTlCOm&iZ. %fc%M 

±<rfflX*$mZ1Xh'tear XTunnel^ -yb-y'fiWf A£ 
fU>. 3 LTs Wiiy^$8^7'fi, if-b'y^IWF^ 
4>?)Tear XTunnel^ 'yfc-S/fcBBVVfci: SfffiUt 
-y h £ *rfc&*il&^7*fc: (gjM^S £ fc *^#gi; & 

[0269] RB#^, WIF^ffiORLP/g#m£T'£Wflj 

iS6ftfciK>:frUv^.y hcDJjfc£<7)j3!fiy-^yx# 

(current send sequencenumber ) 1t%Z.X\<^h <, Z 
oLX. IWFfi, ;n4>20<0#-f-<OlBI(C*S^.yh 

& \y ^jifrri. mzmm-t & zt&*imb%& . rlp 

[ 0 2 7 0 3 if u^E b> y f 4 mSfeii* ms^MB 

wttt, ztLzmm-ztiMziz. mz, mc&v- 

t>^'IWF<O^IJSrtear downl-XTunnel^ •y-fe-v'HJf 

A Lxw&Ft-'£yy\wiiZT&t z t cofrtf>mt $ 

*U>. Ztltffl-co&m$:mffr?Z>tltbcOi>o-^<Dlj 

mkLX. *-AIWFfi. imw—t'yviwizxix 

M.mzmZJ&gcr>fo o £ I -XTunnel <7)y- ^yxff 

. ;J;-AI«Ffc: J: oTiUfl^il^^^I-XTunneltfOx 
-yyx#t&*aoT^&A:#>t;:. WlW-b'y^IW 
F*qfBfe/^ .y h £3rfc$r1f- t>^IWFfc(Sai-r S <7)T* 

[02 7 1] ^yF*70P H TCtf)r-5t ■y?SBfe£ft/h 
fct-5fcftfctfft£tt<a*^N>7r£\ **i<?*u * 

fc«93TSfr£Jli^6-o<3;frS=£: Urii. xyh* 
s'XrASfc 9/*i£S^7lj^ 
OW^ .y M«iDgfcy\y K * 7 B$|SI 
35**4 . ^Wtffg^IWF^*|^N7'C0JilfjOAP^N°X-r 

co$itz%mz£<7)ftmcr> h 5 b -y 



[0272] ♦fMHttSWOP- hc7)S3i-fb^jli«-r-l» 
PPIJw aStt £ . h fBSH&S: LT'ti . a* f&lft 

iMMS^iifj^aiu y?<rmwm&h ztm 

10 27 3] mtlf. x A -3-?T|J|*|<?)*-A*y h 
7-? fc flnA-f £xy H i'^fAtfiiCn- 5 y^t 

& t (Qtrnteti . s^oispt u y^ ^is^-rs fe» 

flTt-tf— t* y WF t s X j. - 3 - j7 TfT rtcO^- A * «y 
h V-^rtfclSS$nfc*-AIWFfc ^^o; b t % 

fe) xy ^xfA*^ (#^rt^) -9--b'y^'iWFtc 

|*J*>V\ ZZfrt> (-JL-3 — ?TfJF*|C7)) 7}^-AIWF^ 
1ST, SIX. «jSolSWcR4J:d(c;u-hSfti. 
[0274] -oo«Fi£ Lv^rrn-f-(i 

I). <r<?)i§-£tt -9--t'y^IWF^*-AIWF<7)J;a^a 

rfj^jy^r -r y^/p^^xA^*i:vHcs»i6<jfciifi 
■rsidfcsns. raw? a y?te£tfmzmk<r> 

3S^{iIETFcr)R0AM0PS^^^-7°^ «k -> TUlS £ ilS 
[ 0 2 7 5 ] fc*£U -f-fy^IWFtt. ZWm&X 

&ztz<&mtzti&. m&v>nmmizn^xi&. ?* 

— 0 y^li-^-^'tix y h" yxy-AWPP-?-^ ( fi^Jt 
tf » #?iOlSP ) *u9g3R<9#a£ 7^-1) ysn-9-- 
y n'^x y F isXT-J±fi*t>%.m U ^ xx h ^^ff L£ fc # 
tc*as„ 7*-y ym£y--;<tf-y-t'y7iwcr)i}tf 
5?*SitSlW-A* (0(i.(f, #^<7)ISP) tc^-AIW 
FJ;0 fciSv*£fc£Jai*fc, 7^-yyS^-yNW 
-t'y^IWFtWLT. L2TPhy^€: (*-AS^ 
w\'joJ;y:'*-AlWFtSij£^PPP H f-^s;r'{i^< ) e 
#tcfit>ifiv VPPir-y^fc:i6i(tT5t4-r 4 - 1 5r^-f 
S. 7*-'jy^^-/s'ii. tf-ASMWw? 
Ciy Fv-XrA^-t'y^lWFi: 7 * - y ypppt J; 

[0276] ho-mmmmizte^xn. 7*-yy 

gii-^-y N'ti-tf - b y ^ I WFO^r^#a $ ft § PPP+r-y \* 
* — U y^il+y--^ Wx y h v-x f A*» 4>SH y ^ xx 
y^SSHy ^xx h>< •yb-i/t-tf-b'y^'IWFcOffifS 

bfkmittfmmzti&z t 
i-ffltotzttMLx. ztiz*-&m3i ji r-'Mzm&. 

mmzy *-v ym%*r-i VZV- by wizft L 
T« L2TPF y^S:PPP^-yN'tzr6i(tTflti-r-S) Z t Sr 
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i&rt&. %m 9 ^xbm<&ztitzm&x\ 

[0 2 773 B3 4fcfcWCIi, f-^7l/-A(l ft 

x<im y h *ii t xm-or 9-tx^y* 1 comxmmz 

U &-<7>T7*xm>h*miXM%mrhb*. 
Mi U 9 xx h # s&— we v <>f yux y h* i/Xy-At^m 

-CDTf-kXtfJ >h£mtXW-cr>T?-tXJ\7t,zm 
mZti. !&-WEA^xy FyxrAA^-W/*?-te 
x/\7iz. m-<r)%.mr-><\,zWmth 

ft»te. I-MAM^xy^y^fA« 

wr^-fexaM y bt> i m-coT9*xj\7b 

*U ^~coT9^XtHA yb^m-coT9-tXJ\7'b V 

y?ZtxtzbZ, m~coT9-tx#4 ybbM-coT9 

[0 2 78] 03 5£tJWC«, f-^7l/-All ft 

x'\7&mtxm—co-i yf-y-^yrmm (iwf) 

-T -5. # > 'J h we A*>f ;px y H i/X 
tAj&'&S— <z>7?-feX;K>r yhfcitfinw/^-tex 

;UX y H yXfAA\ *- ^fiMr^-^<(C]|J9rt S £ 

— WE/nW ;ny h xXtA^ZW/" ?-fex;Y/£ 51 

4 yf-y-^yymmtv y?Zti. m~cor9-tx 
)\irtf>%-<r)4 y?-v-* yfffl&b y y? ztitim 

tgt <oiSko y y ? a*B«£ ti h . 

[0 2 79] H3 6^t3^T(i. 7 *- U y*«y h 7- 

^nyh'^fit, m-wry^-y-dfy^uiE 

SriitTUHco^f y^-V-^f y^Sgi:<7)ISTjifi$ 
ftXfcy, ^-A^7h7-^t:ijv^il f-^7l/ 
-Ati. fttt(±. siHwf y*-7-*y^«iigfcSS- 

;^;HyHyA fAiW L , SS-<9 T 9 -fe xv \ 7' £ 

a tr ss»ts t £ . a* u ?xx h tm-wM 
)Vx~yYi<'X7-AfrL>w.-<7)T9*iXtf4yb. m—tn 
T9*.xf\-?\ jo j; xsm-cDm$->r~; tx 

SfiW-^'CiSfiSii. iS-weA^f ;wxy f y^fA 
*»*-A»*»t-^K, iszwf y?-7-*y?HfS 
fcSB-WIfsir-Afc<7)|ie) y y9 &®mt& Zbtc 

<. nsaztiz. m-*>SM&-'*frt>&»v9x.A 
h zx-^miv-^zmm-t&x^ y nz&^x . m 



-wf y9-v-*y9W&frL>m-<7)4 y?-?-* 

y9mm<,z$8g.i-2>mwtmt>tih. mc, ib-we 
jU)v^yb^xT-i±tfm-<?)T9*x;\7zmtxn 
miztitzit. sszwt y9-y-*y9mmh i m= 
cr>jy9- r 7-*y9mmt>jy9ZfL. Wi—cr>4 y9 
-u v9m&ffiEmA yf-v-^yrmmt y y? 
ztv/zmz. m-wr y9-7-*y9mmtmE.co4 
y9-*y9®mt?>mv>v y9mimztih. 

[0280] 03 7fc*5VrC«U ^7*-'jy*>> 

»ffi*iifciis=<o>f y9-v-*yymmt<vm:m 

it^tlXte*). *-J**-yb r 7-9lZ&^Xte. 7-9 

7y-Aii, ft%j{4, ISHco^y^-v-^y^litgh 

a-ojiii^-^'fccoiaTiHiSiirv^. mz, m- 

;uxy h yxfA^fi l , ^or 9*.x>\ 
y*w txm%®r? h ti.tft'jmh *»»-<^* 

vsW;wxy Kv-Xf-A^^IB— ^7^-fe^yh, |g 
— cor 9 -tr n 7*. *j J: tX|g ~ tfjeHW" —> i * ii t T * 

»ffifc»-c0)Hi^-^*4: y y 7 fcflJBrr* £ fc 
Hfii*$<i4. ftftfc. m-^^'-f/UxyK^ 
XxA^B-60T^-Exy\7^ii tTS«4i$*ife fc # 
mH^-f y^-v-df y9WH&tfm-<7)4 y9- r ?-* 

yymmt vwzti. wejf>a y9-v-*y9mm 
tfm-coA y9-v-*y9'mmt y y9zn.tc.mz. 
mE.coA y9- T 7-*y9mmtm-co4 y9-v-* 
yrmmt <m<r> y y 9Wimz ti& . 

[0 28 1 ] 03 8C*}lfVT«. 7*-'jy^7h7- 
^/HyFyXfAi;, y 9-?-*"/ 9'WiM 

zmtxmE.cr>A y9-v-* yymmbnmx'Mmz 

ilX&<0. *-A*-y by-9t,Z&^Xl*. 7-97U 

^^xyKy^fA^'iiL, m-coT9^x^r^m 

xyHv-x-rA^^H-^Tiz-fex^yh, |g— cor 
^ -bX/N7' , t> it/BZlcoSlli-ff-y s'£5i 

^xyHyxxA^-cor^-tx^T'^iibTIISii 
mEo-fy^-y-dfy^atgfciBz^y 
j--7-^yy'li&^'jy^§ii, w,mcr>4 y9~ r 7- 
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1. Title of Invention 

MOBILITY MANAGEMENT SYSTEM 

2. Claims 

1 . A communications system comprising: 

a network that includes a first registration server and first and second 
access points and a first access hub, the network initially communicating data frames 
between a first mobile end system and the first access hub through the first access point; 

wherein the first access hub includes a first module to rc-rcgistcr the first 
mobile end system with the first access hub without informing the first registration server 
when a registration request is received from the first mobile end system through the 
second access point; 

wherein the first access hub further includes a second module to link the 
second access point with the first access hub when the mobile end system re-registers 
through the second access point; and 

wherein the first access hub further includes a third module to de-link the 
first access point from the first access hub when the second access point is linked with 
the first access hub. 

2. The system of claim I, wherein: 

the network is regarded as a foreign network and the foreign network 
further includes second and third access hubs and a first inter-working function, the 
foreign network initially communicating data frames between a second mobile end 
system and the first inter-working function through the second access hub; 
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a home network includes a home registration server; 

the first registration server includes a first module to re-register the 
second mobile end system with the first registration server without informing the home 
registration server when a registration request is received from the second mobile end 
system through a third access point and tiirough the third access hub; 

the first registration server further includes a second module to comand 
the third access hub to be linked with the first inter-working function when the second 
mobile end system re-registers through the third access hub; and 

the first registration server further includes a third module to command 
tlie second access hub to be de-linked from the first inter-working function after the third 
access hub is linked with the first inter-working function. 

3. The system of claim 2, wherein: 

the foreign network further includes a fourth access hub and second and 
third inter-workiug functions; 

the home network further includes a fourth inier-working function, the 
foreign network initially communicating data frames between a third mobile end system 
and the fourth inter-working function through the second inter-working function, the 
home network initially communicating data frames between the fourth inter-workirig 
function and a first communications server, 
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the home registration server includes a first module to re-register the 
third mobile end system with the home registration server without de-linking the fourth 
inter- working function from the first communications server when a registration request 
is received from the third mobile end system through a fourth access point and through 
the fourth access hub and through the first registration server, the first module 
recognizing an indication in the registration request of a change from the second inter- 
working function to the third inter-woi king function; 

the home registration server further includes a second module to comand 
the fourth inter-working function to be linked with the tliird, inter- working function when 
the third mobile end system re-registers through the fourth access hub, and 

the home registration server further includes a third module to comand 
the fourth inter-working function to be de-linked from the second inter-working function 
after the third inter working function is linked with the fourth inter-working function. 

A. The system of claim 3, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter working function; 

a second foreign network includes a second registration server and a fifth 
access hub and a sixth inter-working function; 

the home network further includes a seventh inter-working function, the 
first foreign network initially communicating data frames between a fourth mobile end 
system and the seventh inter- working function through the fifth inter-working function, 
the home network initially communicating data frames between the seventh intcr- 
working function and a second communications server; 
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the home registration server further includes a fourth module to re- 
register the fourth mobile end system with the home registration server without de- 
linking the seventh inter-working function from the second communications server when 
a registration request is received from the fourth mobile end system through a fifth 
access point and through the fifth access hub and through the second registration server 
to the home registration server; 

the home registration server further includes a fifth module to command 
the seventh inter-working function to be linked with the sixth inter-working function 
when the fourth mobile end system re-rcgisters through the fifth access hub; and 

the home registration server further includes a sixth module to command 
the seventh inter-working function to be de-linked from the fifth inter-working function 
after the sixth inter-working function is linked with the seventh inter- working function. 

5. The system of claim 3, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a fifth 
access hub and a sixth inter working function; 

the home network further includes seventh and eighth inter-working 
functions, the first foreign network initially communicating data frames between a fourth 
mobile end system and seventh inter-working function through the fifth inter-working 
function, the home network initially communicating data frames between the seventh 
inter-working function and a second communications server, 
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the homo registration server further includes a fourth module to re 
register the fourth mobile end system with the home registration server when a 
registration request is received from the fourth mobile end system through a fifth access 
point and through the fifth access hub and through the second registration server to the 
home registration server; 

the home registration server further includes a fifth module to command 
the eighth inter-working function to be linked with the sixth intei -working function when 
the fourth mobile end system re-registers through the fifth access hub, 

the home registration server further includes a sixth module to command 
the eighth inter-working function to be linked with the second communications sei-ver; 

the home registration server further includes a seventh module to 
command the seventh inter-working function to be de-linked from the second 
communications server; and 

the home registration server further includes an eighth module to 
command the seventh inter-working function to be de-linked from the fifth inter-working 
function after the eighth inter-working function is linked with the sixth inter-working 
function. 

6. A communications system comprising: 

a foreign network that includes a first registration server and first and 
second access hubs and a first inter-working function, the foreign network initially 
communicating data frames between a first mobile end system and the first inter-working 
function through the first access hub; 



a home network that includes a home registration server; 
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wherein the first registration server includes a first module to re-register 
the first mobile end system with the first registration server without informing the home 
registration server when a registration request is received from the first mobile end 
system through a first access point and throush the second access hub to the first 
registration server; 

wherein the first registration server further includes a second module to 
command the second access hub to be linked with the first inter-working function when 
the first mobile aid system re-registers through the second access hub; and 

wherein the first registration seiver further includes a third module to 
command the first access hub to be dc-linked from the first inier-working function after 
the second access hub is linked with the first inter-working function. 

7. The system of claim 6, wherein: 

the foreign network further includes a third access hub and second and 
third inter-working functions; 

the home network further includes a fourth inter-working function, the 
foreign network initially communicating data frames between a second mobile end 
system and the fourth inter-working Sanction through the second inter-working function, 
the home network initially communicating data frames between the fourth inter-working 
(unction and a first communications server; 
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the home registration server includes a first module to re-register the 
second mobile end system with the home registration server without de-linking the 
fourth intcr-working function from the first communications server when a registration 
request is received from the second mobile end system through a second access point 
and through the third access hub and through the first registration server to the home 
registration se. ver, the first module recognizing an indication in the registration request 
of a change from the second inter-working function to the third inter-working function; 

the home registration server further includes a second module to 
command the third inter-working function to be linked with me fourth inter working 

function when ihe second mobile end system re-registers through the third access hub; 
and 

the home registration server further includes a third module to command 
the second inter-working function to be de-linked from the fourth inter-working function 
after the third inter-working function is linked with die fourth inter-working function. 

8. The system of claim 7, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a 
fourth access hub and a sixth inter-working function; 

the home network further includes a seventh inter-working function, the 
first foreign network initially communicating data frames between a third mobile end 
system and the seventh inter-working function through the fifth inter-working function, 
the home network initially communicating data frames between the seventh inter- 
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the home registration server further includes a fourth module to re- 
register the third mobile end system with the home registration server without de-linking 
the seventh inter-working function from the second communications server when a 
registration request is received from the third mobile end system through a third access 
point and through the fourth access hub and through the second registration server to 
the home registration server; 

the home registration server further includes a fifth module to command 
the sixth inter-working function to be linked with the seventh inter-working function 
when the third mobile end system re-registers through the fourth access hub; and 

the home registration server further includes a sixth module to command 
the fifth inter-working function to be delinked from the seventh inter-working function 
after the sixth inter-working function is linked with the seventh inter- working function. 

9. The system of claim 7, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a 
fouith access hub and a sixth inter-working function, 

the home network further includes seventh and eighth inter-working 
functions, the first foreign network initially communicating data frames between a third 
mobile end system and seventh inter-working function through the fifth inter-working 
function, the home network initially communicating data frames between the seventh 
inter-working function and a second communications server- 
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the home registration server further includes a fourth module to re- 
register the third mobile end system with the home registration server when a 
registration request is received from the third mobile end system through a third access 
point and through the fourth access hub and through the second registration server to 
the home registration server; 

the home registration server further includes a fifth module to command 
the eighth inter-working function to be linked with the sixth inter=working function when 
the third mobile end system re registers through the fourth access hub; 

the home registration server further includes a sixth module to command 
the eighth inter-working function to be linked with the second communications server; 

the home registration server further includes a seventh module to 
command the seventh inter-working function to be de-linked from the second 
communications server, and 

the home registration server farther includes an eighth module to 
command the seventh inter-working function to be de-linked from the fifth inter-working 
function after the eighth inter-working function is linked with the sixth inter-working 
function. 

10. A communications system comprising: 

a foreign network that includes a first registration server and a first 
access hub and first and second inter-working functions; 
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a home network that include a home registration server and a third inter- 
working function, the foreign network initially communicating data frames between a 
first mobile end system and the third inter-working function through the first inter- 
working function, the home network initially communicating data frames between the 
third inter-working function and the first communications server; 

wherein the home registration seiver includes a first module to re- 
register the first mobile end system with the home registration server without de-linking 
the third inter-working function from the first communications server when a registration 
request is received from the first mobile end system through a first access point and 
through the first access hub and through the first registration server to the home 
registration server, the first module recognizing an indication in the registration request 
of a change from the first inter- working function to the second inter-working function; 

wherein the home registration server further includes a second module 
to command the second inter-working function to be linked with the third inter-working 
function when the first mobile end system re-registers through the first access hub; and 

wherein the home registration server further includes a third module to 
command the first inter-working function to be de-linked from the tliird inter working 
function after the second inter-working function is linked with the third inter-working 
function. 

1 1 . The system of claim 1 0, wherein : 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes fourth inter-working function; 

a second foreign network includes a second registration server and a 
second access hub and a fifth inter-working function; 
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the home network further includes a sixth inter-working function, the 
first foreign network initially communicating data frames between a second mobile end 
system and the sixth inter-working function through the fourth inter-working function, 
the home network initially communicating data frames between the sixth inter-working 
function and a second communications server; 

the home registration server further includes a fourth module to re- 
register the second mobile end system with the home registration server without de= 
linking the sixth inter-working function from the second communications seiver when 
a registration request is received from the second mobile end system through a second 
access point and through the second access hub and through the second registration 
server to the home registration server; 

the home registration seiver further includes a fifth module to command 
the fifth inter-working function to be linked with the sixth inter-working function when 
the second mobile end system re-registers through the second access hub; and 

the home registration server further includes a sixth modulo to command 
the fourth inter-working function to be de-linked from the sixth inter-working function 
after the fifth inter-working lunction is linked with the sixth inter-working function. 

12. The system of claim 10, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fourth inter-working function, 

a second foreign network includes a second registration server and a 
second access hub and a fifth inter-working function; 
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the home network further includes sixth and seventh inter-working 
functions, the first foreign network initially communicating data frames between a 
second mobile end system and the sixth inter working function through the fourth inter- 
working function, the home network initially communicating data frames between the 
sixth inter-working function and a second communications server; 

the home registration server farther includes a fourth module to re- 
register the second mobile end system with the home registration server when a 
registration request is received from the second mobile end system through a second 
access point and through the second access hub and through the second registration 
server to the home registration server, 

the home registration server further includes a fifth module to command 
the fifth inter-working function to be linked with the seventh inter-working function 
when the second mobile end system re-registers through the second access hub; 

the home registration server further includes a sixth module to command 
the seventh inter-working function to be linked wiih the second communications server; 

the home registration server further includes a seventh module to 
command the sixth inter-working function to be de linked from the second 
communications server, and 

the home registration server further includes an eighth module to 
command the sixth inter-working function to be de-linked from the fourth inter working 
function after the seventh inter-working function is linked with the fifth inter-working 
function. 
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13. A communications system comprising: 

a first foreign network that includes a first registration server and a first 
inter-working function; 

a second foreign network that includes a second registration server and 
a first access hub and a second inter-working function; 

a home network that includes a home registration server and a third 
inter-working function, the first foreign network initially communicating data frames 
between a first mobile end system and the third inter-working function through the first 
inter-working function, the home network initially communicating data frames between 
the third inter-working function and the first communications server; 

wherein the home registratation server includes a first module to re- 
register the first mobile end system with the home registration server without dc-linking 
the third inter-working function from the first communications server when a registration 
request is received from the first mobile end system through a first access point and 
through the first access hub and through the second registration server to the home 
registration server; 

wherein the home registratation server further includes a second module 
to command the third inter-working Junction to be linked with the second inter-working 
function when the first mobile end system reregisters through the first access hub; and 

wherein the home registratation server further includes a third module to 
command the third inter-working function to be de-linked from the first inter-working 
function after the third inter-working function is linked with the second inter-working 
function. 
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1 4. A communications system comprising: 

a first foreign network that includes a first registration server and a first 
inter- working function; 

a second foreign network that includes a second registration server and 
a first access hub and a second inter-working function; 

a home network that includes a home registration server and third and 
fourth inter-working functions, the first foreign network initially communicating data 
frames between a first mobile end system and the third inter-working function through 
the first inter^working function, the home network initially communicating data frames 
between the third inter-working function and the first communications server; 

wherein the home registratation server includes a first module to re- 
register the first mobile end system with the home registration server when a registration 
request is received from the first mobile end system through a first access point and 
through the first access hub and through the second registration server to the home 
registration server; 

wherein the home regisirataiion server further includes a second module 
to command the fourth inter-working function to be linked with the second inter- 
working function when the first mobile end system re-registers through the first access 
hub, 

wherdn the home registration server further includes a third module to 
command the fourth inter-working function to be linked with the first communications 



server; 
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wherein the home registration server further includes a fourth module 
to command the third inter-working function to be de-linked from the first 
communications server when the fourth inter-working function is linked with the first 
communications server, and 

wherein the home registration server further includes a fifth module to 
command the third inter working function to be de-linked from the first inier-working 
function after the fourth inter-working function is linked with the second inter-working 
function. 

15. In a network that includes a first registration server and first and second 
access points and a first access hub, a method of handing off a connection of a first 
mobile end system with the first access hub, the method comprising steps of: 

initially communicating data frames between the first mobile end system 
and the first access hub through the first access point; 

sending a registration request from the first mobile end system through 
the second access point to the first access hub to re-register the first mobile end system 
with the first access hub without informing the first registration server when the first 
mobile end system moves and re-registers through the second access point; 

linking the second access point with the first access hub when the first 
mobile end sysLera re-registers through the second access point; and 

de-linking the first access point from the first access hub when the 
second access point is linked with the first access hub. 
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1 6. Hie method of claim 1 5, wherein: 

the network is regarded as a foreign network and the foreign network 
further includes second and tliird access hubs and a first inter-working function; 

a home network includes a home registration server; 

the method further includes a step of initially communicating data frames 
between a second mobile end system and the first inter-working function through ihe 
second access hub; 

the method further includes a step of sending a registration request from 
the second mobile end system through a third access point and through the third access 
hub to the first registration server to re-register the second mobile end system with the 
first registration server without informing the home registration server when the second 
mobile end system moves and re-registers through the third access hub, 

the method further includes a step of linking the third access hub with the 
first inter-working function when the second mobile end system re-registers through the 
third access hub; and 

the method further includes a step of de-iinking the second access hub 
from ihe first inter-working function after the third access hub is linked with the first 
inter-working function. 

17. The method of claim 16, wherein: 

the foreign network farther includes a fourth access hub and second and 
thud inter-working functions; 
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the home network further includes a fourth inter-working function; 

the method further includes a step of initially communicating data frames 
between a third mobile end system and the fourth inter- working function through the 
second inter-working function; 

the method further includes a step of initially communicating data frames 
between the fourth inter-working function and a first communications server; 

the method further includes a step of sending a registration request from 
the third mobile aid system through a fourth access point and through the fourth access 
hub and through the first registration server to the home registration server to re register 
the third mobile end system with the home registration server without dc-linking the 
fourth inter-working function from the first communications server when the third 
mobile end system moves and re-registers through the fourth access hub, the step of 
sending the registration request from the first registration server to the home registration 
server including a sub- step of sending an indication of a change from the second inter- 
working function to the third inter-working function; 

the method further includes a step of linking the third inter-working 
function with the fourth inter-working function when the third mobile end system re- 
registers through the fourth access hub; and 

the method further includes a step of de-linking the second inter-working 
function from the fourth inter-working function after the third inter-working function is 
linked with the fourth inter-working function. 
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1 8. The method of claim 1 7, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a fifth 
access hub and a sixth inter- working function; 

the home network further includes a seventh inter-working function; 

the method further includes a step of initially communicating data frames 
between a fourth mobile end system and the seventh inler-working function through the 
fifth inter- working function; 

the method further includes a step of initially communicating data frames 
between the seventh inter-working function and a second communications server; 

the method further includes a step of sending a registration request from 
the fourth mobile end system through a fifth access point and through the fifth access 
hub and through the second registration server to the home registration server to re- 
register the fourth mobile end system with the home registration server without de- 
linking the seventh inter-working function from the second communications server when 
the fourth mobile end system moves and re-registers through the fifth access hub; 

the method further includes a step of linking the sixth inter-working 
function with the seventh inter-working function when the fourth mobile end system re^ 
registers through the fifth access hub; and 

the method further includes a step of de-linking the fifth inter-working 
function from the seventf! inter-working function after the sixth inter-working function 
is linked with the seventh inter-working function. 
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1 9 . The method of claim 1 7 S wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a fifth 
access hub and a sixth inter-working function; 

the home network further includes seventh and eighth inter-working 

functions; 

the method further includes a step of initially communicating data frames 
between a fourth mobile end system and seventh inter- working function through the fifth 
inter-working function, 

the method farther includes a step of initially communicating data frames 
between the seventh inter-working function and a second communications server; 

the method further includes a step of sending a registration request from 
the fourth mobile end system through a fifth access point and through the fifth access 
hub and through the second registration server to the home registration server to re- 
register the fourth mobile end system with the home registration server when the fourth 
mobile end system moves and re-registers through the fifth access hub; 

the method further includes a step of linking the eighth inter-working 
function with the sixth inter-working function when the fourth mobile end system ie= 
registers through the fifth access hub; 

the method further includes a step of linking the eighth inter-working 
function with the second communications server; 
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the method further includes a step of de-linking the seventh inter- 
working (unction from the second communications server; and 

the method further includes a step of de-linking the seventh inter- 
working function from the fifth inter-working function after the eighth inter-working 
function is linked with the sixth inter-working function. 

20. In a home network with a home registration server and a foreign network 
that includes a first registration server and first and second access hubs and a first inter- 
woiking function, a method of handing off a connection of a first mobile end system with 
the first inter-working function, the method comprising steps of: 

initially communicating data frames between the first mobile end system 
and the first inter-working function through the first access hub; 

sending a registration request from the first mobile end system through 
a first access point and through the second access hub to the first registration server to 
re-register the first mobile end system with the first registration server without informing 
the home registration server when the first mobile end system moves and re-registers 
through the second access hub; 

linking the second access hub with the first inter-working function when 
the first mobile end system re-regislers through the second access hub; and 

de-linking the first access hub from the first inter-working function after 
the second access hub is linked with the first inter-working function. 

2 1 The method of claim 20, wherein: 

the foreign network further includes a third access hub and second and 
third inter-working functions; 
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the home network further includes a fourth inter-working function; 

the method further includes a step of initially communicating data frames 
between a second mobile end system and the fourth inter working function through the 
second inter-working function; 

the method further includes a step of initially communicating data frames 
between the fourth inter-working function and a first communications server; 

the method further includes a step of sending a registration request from 
the second mobile end system through a second access point and through the third 
access hub and through the first registration server to the home registration server to re- 
register the second mobile end system with the home registration server without de- 
linking the fourth inter-working function from the first communications server when the 
second mobile end system moves and re-registers through the third access hub, the step 
of sending the registration request from the first registration server to the home 
registration server including a sub-step of sending an indication of a change from the 
second inter-working function to the tliird inter-working function; 

the method further includes a step of linking the third inter-working 
function with the fourth inter-working function when the second mobile end system re- 
registers through the third access hub; and 

the method further includes a step of de-linking the second inter-working 
function fr om the fourth inter-working function after the third inter-working function is 
linked with the fourth inter-working ftinction. 
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22. The method of claim 2 1 , wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a 
fourth access hub and a sixth inter-working function; 

the home network further includes a seventh inter-working function; 

the method further includes a step of initially communicating data frames 
between a third mobile end system and the seventh inter-working function through the 
fifth inter-working function; 

the method further includes a step of initially communicating data frames 
between the seventh inter-working function and a second communications server; 

the method further includes a step of sending a registration request from 
the third mobile end system through a third access point and through the fourth access 
hub and through the second registration server to the home registration server to re- 
register the third mobile end system with the home registration server without de-linking 
the seventh inter-working function from the second communications server when the 
third mobile end system moves and re-registers through the fourth, access hub; 

the method further includes a step of linking the sixth inter-working 
function with the seventh inter-working function when the third mobile end system re- 
registers through the fourth access hub; and 

the method further includes a step of de-linking the fifth inter-working 
function from the seventh inter-working function after the sixth inter-working function 
is linkod with the seventh intcr-working function. 
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23 . The method of claim 2 1 , wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fifth inter-working function; 

a second foreign network includes a second registration server and a 
fourth access hub and a sixth inter-working function; 

the home network further includes seventh and eighth inter-working 

functions; 

the method further includes a step of initially communicating data frames 
between a third mobile end system and seventh inter-working function through the fifth 
intcr-working function; 

the method further includes a step of initially communicating data frames 
between the seventh inter-working function and a second communications server; 

the method further includes a step of sending a registration request from 
the third mobile end system through a third access point and through the fourth access 
hub and through the second registration server to the home registration server to re- 
register the third mobile end system with the home registration server when the third 
mobile end system moves and re registers through the fourth access hub; 

the method further includes a step of linking the eighth inier-working 
function with the sixth inter-working function when the third mobile end system re- 
registers through the fourth access hub; 

the method further includes a step of linking the eighth mter=working 
function with the second communications server; 
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the method further includes a step of de-linking the seventh inter- 
working function from the second communications server; and 

the method further includes a step of de-linking the seventh inter- 
working function from the fifth inter-working function after the eighth inter-working 
function is linked with the sixth inter-working function. 

24. In a homo network with a home registration server and a foreign network 
that includes a first registration server and a first access hub and first and second inter- 
working functions, the home network further including a third inter-wprking function, 

a method of handing off a connection of a first mobile end system with a first 
communications server, the method comprising steps of: 

initially communicating data frames between the first mobile end system 
and the third inter-working function through the first inter-working function; 

initially communicating data frames between the third inter-working 
function and the first communications server; 

sending a registration request from the first mobile end system through 
a first access point and through the first access hub and through the first registration 
server to the home registration server to re-register the first mobile end system with the 
home registration server without de-linking the third inter-working function from the 
first communications server when the first mobile end system moves and re-registers 
through the first access hub, the step of sending the registration request from the first 
registration server to the home registration server including a sub-step of sending an 
indication of a change from the first inter- working function to the second inter-working 
function; 
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linking the second inter-working function with the third inter-working 
function when the first mobile end system re-registers through the first access hub; and 

de-linking the first inter-working function from the third inter-working 
function after the second intcr-working function is linked with the third inter-working 
function. 

25. The method of claim 24, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes fourth inter-working function; 

a second foreign network includes a second registration server and a 
second access hub and a fifth inter-working function; 

the home network further includes a sixth inter-working function; 

the method further includes a step of initially communicating data frames 
between a second mobile end system and the sixth inter-working function through the 
fourth inter-working function; 

the method further includes a step of initially communicating data frames 
between the sixth inter-working function and a second communications server; 

the method farther includes a step of sending a registration request from 
the second mobile end system through a second access point and through the second 
access hub and through the second registration server to the home registration server to 
re-rcgister the second mobile end system with the home registration server without de- 
Unking the sixth inter-working function from the second communications server when 
the second mobile end system moves and reregisters through the second access hub' 
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the method further includes a step of linking the fifth inter-working 
function with the sixth inter-working function when the second mobile end system re- 
registers through the second access hub; and 

the method further includes a step of de-linking the fourth inter-working 
function from the sixth inter-working function after the fifth inter-working function is 
linked with the sixth inter-working function. 

26. The method of claim 24, wherein: 

the foreign network is regarded as a first foreign network and the first 
foreign network further includes a fourth inter-working function; 

a second foreign network includes a second registration server and a 
second access hub and a fifth inter-working function; 

the home network further includes sixth and seventh inter-working 

functions; 

the method further includes a step of initially communicating data frames 
between a second mobile end system and the sixth inter-working function through the 
fourth inter-working function; 
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the method further includes a step of initially communicating data frames 
between the sixth inter-working function and a second communications server; 

the method further includes a step of sending a registration request from 
the second mobile end system through a second access point and through the second 
access hub and through the second registration server to the home registiation server to 
re-register the second mobile end system with the home registration server when the 
second mobile end system moves and re registers through the second access hub; 

the method further includes a step of linking the fifth inter-working 
function with the seventh inter-working function when the second mobile end system re- 
registers through the second access hub; 

the method further includes a step of linking the seventh inter-working 
function with the second communications server; 

the method further includes a step of de-linking the sixth inter-working 
function from the second communications server; and 

the method further includes a step of de-Jinking the sixth inter-working 
function from the fourth inter-working function after the seventh inter working function 
is linked with the fifth inter-working function. 

27. In a home network and first and second foreign networks, the first 
foreign network including a first registration server and a first inter working function, 
the second foreign network including a second registration server and a first access hub 
and a second inler-working function, the home network including a home registration 
server and a third inter-working function, a method of handing off a connection of a first 
mobile end system with a first communications server, the method comprising steps of: 
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initially communicating data frames between a first mobile end system 
and the third inter-working function through the first inter-working function; 

initially communicating data frames between the third intei -working 
function and the first communications server; 

sending a registration request from the first mobile end system through 
a first access point and through the first access hub and through the second registration 
server to the home registration server to re register the first mobile end system with the 
home registration server without de-linking the third inter working function from the 
first communications server when the first mobile end system moves and re-registers 
through the first access hub; 

Unking the third inter-working function with the second inter-working 
function when the first mobile end system re-registers through the first access hub; and 

de-linking the third inter-working function from the first inter-working 
function after the third inter-working function is linked with the second inter-working 
function. 

28. In a home network and first and second foreign networks, the first 
foreign network including a first registration server and a first inter-working function, 
the second foreign network including a second registration server and a first access hub 
and a second inter-working function, the home network including a home registration 
server and third and fourth inter-working functions, a method of handing off a 
connection of a first mobile end system with a first communications server, the method 
comprising steps of: 
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initially communicating data frames between a firsL mobile end system 
and the third inter-working function through the first inter-working function; 

initially communicating data frames between the third inter working 
function and the first communications server; 

sending a registration request from the first mobile end system through 
a first access point and through the first access hub and through the second registration 
server to the home registration server to re-register the first mobile end system with the 
home registration server when the first mobile end system moves and re-registers 
through the first access hub; 

linking the fourth inter-working function with the second inter-working 
function when the first mobile end system re-registers through the first access hub; 

linking the fourth inter-working function with the first communications 

server; 

de-linking the third inter-working function from the first communications 
server when the fourth inter-working function is linked with the first communications 
server; and 

de-linking the third inter-working function from the first inter-working 
function after the fourth inter-working function is linked with the second inter-working 
function. 



(93) 



mm 5 ? 1 1-284666 



3. Detailed Explanation*' of the Invention 
Background oE the Invention 

Priority benefit of the October 14, 1997 filing date of provisional application 
serial number 60/061,915 is hereby claimed. 

Field of the Invention 

The present invention relates to the management of mobile end systems in a 
packet switched data network that provides computer users with remote access to the 
internet and to private intranets using virtual private network services over a high 
speed, packet switched, wireless data link. In particular, the invention relates to the 
management of connection handovers when a mobile end system moves from one cell 
to another. 

Description Of Related Art 

FIG, I depicts three business entities, whose equipment, working together 
typically provide remote internet access to user computers 2 through user modems 4. 
User computers 2 and modems 4 constitute end systems. 

The first business entity is the telephone company (telco) that owns and 
operates the dial-up plain old telephone system (POTS) or integrated services data 
network (ISDN) network. The telco provides the media in the form of public 
switched telephone network (PSTN) 6 over which bits (or packets) can flow between 
users and the other two business entities. 

The second business entity is the internet service provider (ISP). The ISP 
deploys and manages one or more points of presence (POPs) 8 in its service area to 
which end users connect for network service. An ISP typically establishes a POP in 
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each major local calling area in which (lie ISP expects to subscribe customers. The 
POP converts message traffic from the PSTN run by the telco into a digital form to 
be carried over intranet backbone 10 owned by the ISP or leased from an intranet 
backbone provider like MCI, Inc. An ISP typically leases fractional or full Tl lines 

or fractional or full T3 lines from the telco for connectivity to the PSTN. The POPs 
and the ISP's medium data center 14 are connected together over the intranet 
backbone through router 12A. The data center houses the ISP's web servers, mail 
servers, accounting and registration servers, enabling the ISP to provide web content, 
e-mail and web hosting services to end users. Future value added services may be 
added by deploying additional types of servers in the data center. The ISP also 
maintains router 12A to connect to public internet backbone 20. In the current model 
tor remote access, end users have service relationships with their telco and their ISP 
and usually get separate bills from both. End users access the ISP, and through the 
ISP, public internet 20, by dialing the nearest POP and running a communication 
protocol known as the Internet Engineering Task Force (IETF) point-to-point protocol 
(PPP). 

The third business entity is the private corporation which owns and operates 
its own private intranet 18 dirough router 12B for business reasons. Corporate 
employees may access corporate network 18 (e.g., from home or while on the road) 
by making POTS/ISDN calls to corporate remote access server 16 and running the 
IETF PPP protocol. For corporate access, end users only pay for the cost of 
connecting to corporate remote access server 16. The ISP is not involved. The 
private corporation maintains router 12B to connect an end user to either corporate 
intranet 18 or public internet 20 or both. 
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End users pay the telco for the cost of making phone calls and for the cost of 
a phone line into their home. End users also pay the ISP for accessing the ISP's 
network and services. The present invention will benefit wireless service providers 
like Sprint PCS, PrimcCo, etc. and benefit internet service providers like AOL, 
AT&T Worldnet, etc. 

Today, internet service providers offer internet access services, web content 
services, e-mail services, content hosting services and roaming to end users. Because 
of low margins and no scope of doing market segmentation based on features and 
price, ISPs arc looking for value added services to improve margins. In the short 
term, equipment vendors will be able to offer solutions to ISPs to enable them to 
offer faster access, virtual private networking (which is the ability to use public 
networks securely as private networks and to connect to intranets), roaming 
consortiums, push technologies and quality of service. In the longer ter m, voice over 
internet and mobility will also be offered. ISPs will use these value added services 
to escape from the low margin straitjacket. Many of these value added services fall 
in the category of network services and can be offered only through the network 
infrastructure equipment. Others fall in the category of application services which 
require support from the network infrastructure, while others do not require any 
support from the network infrastructure. Seivices like faster access, virtual private 
networking, roaming, mobility, voice, quality of service, quality of service based 
accounting all need enhanced network infrastructure. The invention described here 
will be either directly provide these enhanced services or provide hooks so that these 
services can be added later as future enhancements. Wireless service providers will 
be able to capture a larger share of the revenue stream. The ISP will be able to offer 
more services and widi better market segmentation. 
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Summary Of The Invention 

The present invention provide end users with remote wireless access to the 
public internet, private intranets and internet service providers. Wireless access is 
provided through base stations in a home network and base stations in foreign 
networks with interchange agreements. 

It is an object of the present invention to provide a wireless packet switched 
data network for end users that divides mobility management into local, micro, macro 
and global connection handover categories and minimizes handoff updates according 
to die handover category. It is another object to integrate MAC handoff messages 
with network handoff messages. It is a further object of the present invention to 
separately direct registration functions to a registration server and direct routing 
functions to inter-working function units. It is yet another object to provide an 
intermediate XTunnel channel between a wireless hub (also called access hub AH) 
and an inter-working function unit (IWF unit) in a foreign network. It is yet another 
object to provide an IXTunnel channel between an inter-working function unit in a 
foreign network and an inter-working function unit in a home network. It is yet 
another object to enhance the layer two tunneling protocol (L2TP) to support a mobile 
end system. It is yet another object to perform network layer registration before the 
start of a PPP communication session. 
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The present invention provides computer users with remote access to the 
internet and to private intranets using virtual private network services over a high 
speed, packet switched, wireless data link. These users are able to access the public 
internet, private intranets and their internet service providers over a wireless link. 
The network supports roaming, that is, the ability to access the internet and private 
intranets using virtual private network services from anywhere that the seivices 
offered by the present invention are available. The network targets users running 
horizontal internet and intranet applications. These applications include electronic 
mail, file transfer, browser based WWW access and other business applications built 
around the internet. Because the network will be based on the IETF standards, it is 
possible to run streaming media protocols like RTP and conferencing protocols like 
H.323 over it. 

Other internet remote access technologies that are already deployed or arc in 
various stages of deployment include: wire line dial-up access based on POTS and 
ISDN, XDSL access, wireless circuit switched access based on GSM/CDMA/TDMA, 
wireless packet switched access based on GSM/CDMA/TDMA, cable modems, and 
satellite based systems. However, the present invention offers a low cost of 
deployment, ease of maintenance, a broad feature set, scaleability, an ability to 

degrade gracefully under heavy load conditions and support for enhanced network 
services like virtual private networking, roaming, mobility and quality of service to 
the relative benefit of users and service providers. 
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For wireless service providers who own personal communications system 
(PCS) spectrum, the present invention will enable them to offer wireless packet 
switched data access services that can compete with services provided by the 
traditional wire line telcos who own and operate the PSTN. Wireless service 
providers may also decide to become internet service providers themselves, in which 
case, they will own and operate the whole network and provide end to end services 
to users. 

For internet service providers the present invention will allow them to by-pass 
the telcos (provided they purchase or lease the spectrum) and offer direct end to end 
services to users, perhaps saving access charges io the telcos, which may increase in 
the future as the internet grows to become even bigger than it is now. 

The present invention is flexible so that it can benefit wireless service 
providers who are not internet service providers and who just provide ISP, internet 
or private intranet access to end users. The invention can also benefit service 
providers who provide wireless access and internet services to end users. The 
invention can also benefit service providers who provide wireless access and internet 
services but also allow the wireless portion of the network to be used for access to 
other ISPs or to private intranets. 

In FIG. 2, end systems 32 (e.g., based on, for example. Win 95 personal 
computer) connect to wireless network 30 using external or internal modems. These 
modems allow end systems to send and receive medium access control (MAC) frames 
over air link 34. External modems attach to the PC via a wired or wireless link. 
External modems are fixed, and, for example, co-located with roof top mounted 
directional antennae. External modems may be connected to the user's PC using any 
one of following means: 802.3, universal serial bus, parallel port, infra-red, or even 
an ISM radio link. Internal modems are preferably PCMCIA cards for laptops and 
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are plugged into the laptop's backplane. Using a small omnkiirectional antenna, they 
send and receive MAC frames over the air link. 

Wide-area wireless coverage is provided by base stations 36. The range of 
coverage provided by base stations 36 depends on factors like link budget, capacity 
and coverage. Base stations are typically installed in cell sites by PCS (personal 
communication services) wireless service providers. Base stations multiplex end 
system traffic from their coverage area to die system's mobile switching center 
(MSC) 40 over wire line or microwave backhaul network 38. 

The invention is independent of the MAC and PHY (physical) layer of the air 
link and the type of modem. The architecture is also independent of the physical 
layer and topology of backhaul network 38, The only requirements for the backhaul 
network are that it must be capable of routing internet protocol (TP) packets between 
base stations and the MSC with adequate performance. At Mobile Switching Center 
40 (MSC 40), packet data inter-working function (IWF) 52 terminates the wireless 
protocols for this network. IP router 42 connects MSC 40 to public internet 44, 
private intranets 46 or to internet service providers 46. Accounting and directory 
servers 48 in MSC 40 store accounting data and directory information. Element 
management server 50 manages the equipment which includes the base stations, the 
IWFs and accounting/directory servers. 

The accounting server will collect accounting data on behalf of users and send 
the data to the service provider's billing system. The interface supported by the 
accounting server will send accounting information in American Management 
Association (AMA) billing record format over a TCP/IP (transport control 
protocol/internet protocol) transport to the billing system (which is not shown in the 
figure). 
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The network infrastructure provides PPP (point-to-point protocol) service to 
end systems. The network provides (1) fixed wireless access with roaming (log-in 
anywhere that the wireless coverage is available) to end systems and (2) low speed 
mobility and hand-offs. When an end system logs on to a network, in it may request 
either fixed service (i.e., stationary and not requiring handoff services) or mobile 
service (i.e., needing handoff services). An end system that does not specify fixed 
or mobile is regarded as specifying mobile. The actual registration of the end system 
is the result of a negotiation with a home registration server based on requested level 
of service, the level of services subscribed to by the user of the eud system and the 
facilites available in the network. 

If the end system negotiates a fixed service registration (i.e., not requiring 
handoff services) and the end system is located in the home network, an IWF (inter 
working Junction) is implemented in the base station to relay traffic between the end 
user and a communications server such as a PPP server (i.e., the point with which 
to be connected, for example, an ISP PPP server or a corporate intranet PPP server 
or a PPP server operated by the wireless service provider to provide customers with 
direct access to the public internet). It is anticipated that perhaps 80% of the message 
traffic will be of this category, and thus, this architecture distributes IWF processing 
into the base stations and avoids message traffic congestion in a central mobile 
switching center. 

If the end system requests mobile service (from a home network or a foreign 
network) or if the end system request roaming service (i.e., service from the home 
network through a foreign network), two IWFs are established: a serving iWF 
typically established in the base station of the network to which the end system is 
attached (be it the home network or a foreign network) and a home IWF typically 
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established in mobile switching center MSC of the home network. Since this 
situation is anticipated to involve only about 20% of the message traffic, the message 
traffic congestion around the mobile switching center is minimized. The serving IWF 
and the wireless hub may be co-located in the same nest of computers or may even 
be programmed in the same computer so that a tunnel using an XTunnel protocol 
need not be established between the wireless hub and the serving IWF. 

However, based on available facilities and the type and quality of service 
requested, a serving IWF in a foreign network may alternatively be chosen from 
facilities in the foreign MSC. Generally, the home IWF becomes an anchor point 

that is not changed during the communications session, while the serving IWF may 
change if the end system moves sufficiently. 

The base station includes an access hub and at least one access point (be it 
remote or collocated with the access hub). Typically, the access hub serves multiple 
access points. While the end system may be attached to an access point by a wire or 
cable according io the teachings of this invention, in a preferred embodiment the end 
system is attached to the access point by a wireless "air link", in which case the 
access hub is conveniently referred to as a wireless hub. While the access hub is 
referred to as a "wireless hub" throughout the description herein, it will be 
appreciated that an end system coupled through an access point to an access hub by 
wire or cable is an equivalent implementation and his contemplated by the term 
"access hub". 

In the invention, an end system includes an end user registration agent (e.g., 
software running on a computer of the end system, its modem or both) that 
communicates with an access point, and through the access point to a wireless hub. 
The wireless hub includes a proxy registration agent (e.g., software running on a 
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processor in the wireless hub) acting as a proxy for the end user registration agent. 
Similar concepts used in, for example, the IETF proposed Mobile IP standard are 
commonly referred to as a foreign agent (FA). For this reason, die proxy registration 
agent of the present invention will be referred to as a foreign ageut, and aspects of 
the foreign agent of the present invention diat differ from the foreign agent of Mobile 
IP are as described throughout this description. 

Using the proxy registration agent (i.e., foreign agent FA) in a base station, 
the user registration agent of an end system is able to discover a point of attachment 
to the network and register with a registration server in the MSC (mobile switching 
center) of the home network. The home registration server determines the availability 
of each of the plural inler-working function modules (IWFs) in the network (actually 
software modules that run on processors in both the MSC and the wireless hubs) and 
assigns lWF(s) to die registered end system. For each registered end system, a tunnel 
(using the XTtinnel protocol) is created between the wireless hub in the base station 

and an inter-working function (IWF) in me mobile switching center (MSC), this 
tunnel transporting PPP frames between the end system and the IWF. 

As used herein, the XTunnel protocol is a protocol that provides in-sequence 
transport of PPP da«a frames with flow control. This protocol may run over standard 
IP networks or over point-to-point networks or over switched networks like ATM 
data networks or frame relay data networks. Such networks may be based on Tl or 
T3 links or based on radio links, whether land based or space based. The XTunnel 
protocol may be built by adapting algorithms from L2TP (level 2 transport protocol). 
In networks based on links where lost data packets may be encountered, a re- 
transmission feature may be a desirable option. 
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The end system's PPP peer (i.e., a communications server) may reside in the 
IWF or in a corporate intranet or ISP's network. When the PPP peer resides in the 
IWF, an end system is provided with direct internet access. When the PPP peer 
resides in an intranet or ISP, an end system is provided with intranet access or access 
to an JSP. In order to support intranet or ISP access, die IWF uses the layer two 
tunneling protocol (L2TP) to connect to the intranet or ISP's PPP server. From the 
point of view of the intranet or ISP's PPP server, the IWF looks like a network 
access server (NAS). PPP traffic between the end system and the IWF is relayed by 
the foreign agent in the base station. 

In the reverse (up link) direction, PPP frames traveling from the end system 
to the IWF are sent over the MAC and air link to the base station. The base station 
relays these frames to the IWF in the MSC using the XTunnel protocol. The IWF 
delivers them to a PPP server for processing. For internet access, the PPP server 
may be in the same machine as the IWF. For ISP or intranet access, the PPP server 
is in a private network and the IWF uses the layer two tunneling protocol (L2TP) to 
connect to it. 

In the forward (down link) direction, PPP frames from the PPP server are 
relayed by the IWF to the base station using the XTumxel protocol. The base station 
de-tunnels down link frames and relays them over the air link to the end system, 
where they are processed by the end system's PPP layer. 

To support mobility, support for hand-offs are included. The MAC layer 
assists the mobility management software in the base station and the end system to 
perform hand-offs efficiendy. Hand-offs are handled transparently from the peer PPP 
entities and the L2TP tunnel. If an end system moves from one base station to 
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another, a new XTurmel is created between the new base station and the original IWF. 
The old XTurmel from the old base station will be deleted. PPP frames will 
transparently traverse the new path. 

The network supports roaming (i.e., when the end user connects to its home 
wireless service provider through a foreign wireless service provider). Using this 
feature, end systems are able to roam away from the home network to a foreign 
network and still get service, provided of course that the foreign wireless service 
provider and the end system's home wireless service provider have a service 
agreement. 

in FIG. 3, roaming end system 60 has traveled to a location at which foreign 
wireless service provider 62 provides coverage. However, roaming end system 60 
has a subscriber relationship with home wireless service provider 70. In the present 
invention, home wireless service provider 70 has a contractual relationship with 
foreign wireless service provider 62 to provide access services. Therefore, roaming 
end system 60 connects to base station 64 of foreign wireless service provider 62 over 
the air link. Then, data is relayed from roaming end system 60 through base station 
64, through serving IWF 66 of foreign wireless service provider 62, to home IWF 
72 of home wireless service provider 70, or possibly through home IWF 72 of home 
wireless service provider 70 to internet service provider 74. 

An inter-service provider interface, called the I-interface, is used for 
communications across wireless service provider (WSP) boundaries to support 
roaming. This interface is used for authenticating, registering and for transporting 
the end system's PPP frames between the foreign WSP and the home WSP. 

PPP frames in the up link and the down link directions travel through the end 
system's home wireless service provider (WSP). Alternatively, PPP frames directly 
transit from the foreign WSP to the destination network. The base station in the 
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foreign WSP is the end system's point of attachment in the foreign network. This 
base station sends (and receives) PPP frames to (and from) a serving IWF in the 
foreign WSP's mobile switching center. The serving IWF connects over the 1- 
interfeee to the home IWF using a layer two tunnel to transport the end system's PPP 
frames in both directions. The serving IWF in the foreign WSP collects accounting 
data for auditing. The home IWF in the home WSP collects accounting data for 
billing. 

During the registration phase, a registration server hi die foreign WSP 
determines the identity uf the roaming end system's home network. Using this 
information, the foreign registration server communicates with the home registration 
server to authenticate and register the end system. These registration messages flow 
over the I-interrace. Once the end system has been authenticated and registered, a 
layer two tunnel is created between die base station and the serving IWF using the 
XTUNNEL protocol and another layer two tunnel is created between the serving IWF 
and the home IWF over the I-interface. The home IWF connects to the end system's 
PPP peer as before, using L2TP (level 2 tunnel protocol). During Imnd-offs, the 
location of the home IWF and the L2TP tunnel remains fixed. As the end system 
moves from one base station to another base station, a new tunnel is created between 
the new base station and the serving IWF and the old tunnel between the old base 
station and the serving IWF is deleted. If the end system moves far enough, so that 
a new serving IWF is needed, a new tunnel will be created between the new serving 
IWF and the home IWF. The old tunnel between the old serving and the home will 
be deleted. 
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To support roaming, the I-interface supports authentication, registration and 
data transport services across wireless service provider boundaries. Authentication 
and registration services are supported using the IETF Radius protocol. Data 
transport services to transfer PPP frames over a layer two tunnel are supported using 
the I-XTunnel protocol. This protocol is based on die IETF L2TP protocol. 

As used in this description, the term home IWF refers to the IWF in the end 
system =s home network. The term serving IWF refers to the IWF in the foreign 
network which is temporarily providing service to the end system. Similarly, the 
term home registration server refers to the registration server in the end system's 
home network and the term foreign registration server refers to the registration server 
in the foreign network through which the end system registers while it is roaming. 

The network supports both fixed and dynamic IP address assignment for end 
systems. There are three types of IP addresses that need to be considered. Two are 
associated with mobile IP and the third is associated with PPP. The mobile IP RFC 
mandates that an end system using mobile IP have a fixed home address. Mobile IP 
also mandates that a care-of-addrcss be used as the end point of the mobile IP tunnel 
(XTunnel in our case). For the present network, the care-of-address used for mobile 
IP tunneling (i.e. the XTunnel) is the IP address of the base station. The use of the 
fixed home address is deprecated for the network. In mobile IP registration request 
packets, the value of the home address field is set to 0.0,0.0. A structured User- 
Name field in the simplified mail transfer protocol (SMTP) format is added to the 
mobile IP registration request packet. This is of the form user@domain. The domain 
sub-field is used to identify the user's home domain and is a fully qualified domain 
name. The user sub field is used to identify the user in the home domain. The User- 
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Name is stored on die end system and in the subscriber data-base at the MSC and is 
assigned to the user when he or she subscribes to the service. The domain sub-field 
of die User-Name is used during roaming to identify roaming relationships and the 
home registration server for purposes of registration and authentication. 

The PPP IPCP is used to negotiate the IP address for the end system. Using 
IP configuration protocol IPCP, the end system is able to negotiate a fixed or 
dynamic IP address. 

Although the use of the structured user-name field and the non-use of the 
home address is a feature that characterizes the present invention over a known 
mobile IP, the network may be enhanced to also support end systems that have no 
user-name and only a non-null home address, if mobile IP and its use in conjunction 
with PPP end systems becomes popular. The PPP server may be configured by the 
service provider taassign IP addresses during the IPCP address assignment phase that 

are the same as the end system's home address. In this case, the home address and 
the IPCP assigned IP address will be identical. 

In FIG. 4, base station 64 and air links from end systems form wireless sub- 
network 80 that includes the air links for end user access, at least one base station 
(e.g., station 64) and at least one backhaul network (e.g., 38 of FIG. 2) from the 
base station to MSC 40 (FIG.2). The wireless sub-network architecture of, for 
example, a 3-sectored base station includes the following logical functions. 

1. Access point function. Access points 82 perform MAC layer bridging 
and MAC layer association and dissociation procedures. An access 
point includes a processor (preferably in the form of custom 
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application specific integrated circuit ASIC), a link to a wireless hub 
(preferably in the form of an Ethernet link on a card or built into the 
ASIC), a link to an antenna (preferably in the form of a card with a 
data modulator/demodulator and a transmitter/receiver), and the 
antenna to which the end system is coupled. The processor runs 
software to perform a data bridging function and various other 
functions in support of registration and mobility handovers as furdier 
described herein. See discussion with respect to FIGS. 7, 8 and II. 

Access poinis (APs) take MAC layer frames from the air link 
and relay them to a wireless hub and vice versa. The MAC layer 
association and disassociation procedures are used by APs to maintain 
a list of end system MAC addresses in their MAC address filter table. 
An AP will only perform MAC layer bridging on behalf of end 
systems whose MAC addresses are present in tire table. An access 
point and its associated wireless hub are typically co-located, [n its 
simpliest form, an access point is just a port into a wireless hub. 
When the APs and the wireless hub are co-located in the same cell 
site, they may be connected together via a IEEE 802.3 link. 
Sometimes, access points are located remotely from the wireless hub 
and connected via a long distance link like a wired Tl trunk or even 

a wireless trunk. For multi-sector cells, multiple access points (i.e., 
one per sector) are used. 

Wireless hub function. Wireless hub 84 performs the foreign agent 
(FA) procedures, backhaul load balancing (e.g., over multiple TPs), 
backhaul network interfacing, and the xtunnel procedures. When 
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support for quality of service (QOS) is present, the wireless hub 
implements the support for QOS by running the xtunnel protocol over 
backhauls with different QOS attributes. In a multi sector cell site, a 
single wireless hub function is typically shared by multiple access 
points. 

A wireless hub includes a processor, a link to one or more 
access points (preferably in thti form of an Ethernet link on a card or 
built into an ASIC), and a link to a backhaul line. The backhaul line 
is typically a Tl or T3 communications line that terminates in the 
mobile switching center of the wireless service provider. The link to 
the backhaul line formats data into a preferred format, for example, 
an Ethernet format, a frame relay format or an ATM format. The 
wireless hub processor runs software to support data bridging and 
various other functions as described herein. See discussion with 
respect to FIGS. 9, 10 and 1 1 . 

The base station design supports the following types of cell architectures. 

1 . Local AP architecture. In a local AP architecture, access points have 
a large (> = 2kra, typically) range. They are co-located in the cell 
site with the wireless hub (FIG. 4). Access points may be connected 
to the wireless hub using an IEEE 802.3 network or may be directly 
plugged into the wireless hub's backplane or connected to the wireless 
hub using some other mechanism (e.g. universal serial bus, printer 
port, infra-red, etc.). It will be assumed that the first alternative is 
used for the rest of this discussion. The cell site may be omni or 
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sectored by adding multiple access points and sectored antennas to a 
wireless hub. 

2. Remote AP architecture. In a remote AP architecture, access points 
usually have a very small range, typically around 1 km radius. They 
are located remotely (either indoors or outdoors) from the wireless 
hub. A Tl or a wireless trunk preferably links remote access points 
to the cell site where the wireless hub is located. From the cell site, 
a wire line backhaul or a microwave link is typically used to connect 
to the rWF in the MSC. If wireless trunking between the remote AP 
and the wireless hub is used, omni or sectored wireless radios for 
trunking are utilized. The devices for trunking to remote access points 
are preferably co-located with the wireless hub and may be connected 
to it using an IEEE 802.3 network or may be direcdy plugged into die 
wireless hub=s backplane. These devices will be referred to by the 
term trunk AP. 

3. Mixed AP architecture. In a mixed architecture, the wireless sub- 
network will have to support remote and local access points. Remote 
access points may be added for hole filling and other capacity reasons. 
As described earlier, Tl or wireless trunks may be used to connect 

the remote AP to the wireless hub. 

FIG. 5 shows a cell with three sectors using local APs only. The access 
points and the wireless hub are co-located in die base station and are connected to 
each other with 802.3 links. 



FIG. 6 shows an architecture with remote access points 82 connected to 
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wireless hub 84 using wireless trunks 86. Each trunk access point in the base station 
provides a point to multi-point wireless radio link to the remote micro access points 
(R-AP in figure). The remote access points provide air link service to end systems. 
The wireless hub and the trunk access points are co-located in the base station and 
connected together via 802.3 links. This figure also shows remote access points 82R 

connected to the wireless hub via point to point Tl links. In this scenario, no trunk 
APs are required. 

To support all of the above cell architectures and the different types of access 
points that each cell might use, the network architecture follows the following rules: 

1 . Access points function as MAC layer bridges. Remote access points 
perform MAC bridging between the air link to the end systems and the 
wireless or Tl trunk to the cell site. Local access points perform 
MAC bridging between the air link to the end systems and the wireless 
hub. 

2. Trunk access points also function as MAC layer bridges. They perform 
MAC bridging between the trunk (which goes to the access points) and 
the wireless hub. 

3. The wireless hub is connected to all co=located MAC bridges (i.e. 
local access points or trunk access points) using a 802.3 link initially. 

Additionally, where local access points or remote access points with Tl 
trunks are used, the following rules are followed. 
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Local access points are co-located with the wireless hub and 
connected to it using point to point 802.3 links or a shared 802.3 
network. The first approach is used if the access points can not 
perform intelligent MAC layer bridging functions or if intelligent 
MAC layer bridging is deemed too inefficient. Remote access 
points are connected to the wireless hub using point to point Tl 
trunks. 

Sectorization is supported by adding access points with sectored 
antennas to the cell site. 

End system registration is done using mobile IP techniques. For 
each access point connected to the wireless hub, there is a foreign 

agent executing in the wireless hub. MAC layer association 
procedures are used to keep the MAC address filter tables of the 
access points up to date and to perform MAC layer bridging 
efficiently. The wireless hub participates in MAC association 
functions so that only valid MAC addresses are added to the MAC 
address filter tables of the access points. 

The foreign agent in the wireless hub relays frames from the access 
points to the MSC IWF and vice versa using thtxtunnel protocol. 
The MAC address filter table is used io filter out those unicast 
MAC data frames whose MAC addresses are not preseni in the 
table. The APs always forward MAC broadcast frames and MAC 
frames associated with end system registration functions regardless 
of the contents of the MAC address filter table. 
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5. Local access points use ARP to resolve MAC addresses for routing 
IP traffic to the wireless hub. Conversely, the wireless hub also 
uses ARP to route IP packets to access points. UDP/IP is used for 
network management of access points. 

6. Remote access points connected via Tl do not use ARP since the 
link will be a point to point link. 

7. Support for hand-offs uses mobile IP procedures with assistance 
from the MAC layer. 

In a coll architecture using wireless trunks and trunk APs, the following 
rules are followed. 

1- Trunk access points are co-located with the wireless hub and 

connected to it using point to point 802.3 links. This is done to 
make it easier to route MAC frames. Note that a shared 802.3 
network could also be used, provided the trunk access points can 
intelligently perform their MAC bridging functions. 

2. Wireless trunk sectorization is supported by adding trunk access 
points with sectored antennas to the cell site. 

3. Hand-offs across backhaul sectors are done using mobile IP 
techniques. For each backhaul sector, there is a foreign agent 
executing in die wireless hub. 
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4. The trunk APs do not need to participate in MAC layer end system 
association and hand off procedures. Their MAC address filter 
tables will be dynamically programmed by the wireless hub as end 
systems register with the network. The MAC address filter table is 
used to filter out unicast MAC frames. Broadcast MAC frames or 
MAC frames containing registration packets are allowed to always 
pass through. 

5. Trunk APs use ARP to resolve MAC addresses for routing IP 
traffic to the wireless hub. Conversely, the wireless hub use ARP 
to route IP packets to trunk APs. UDP/IP is used for network 
management of trunk APs. 

6. In a single wireless trunk sector., MAC association and hand-offc 
from one access point to another is done using the MAC layer. 
Using these MAC layer procedures, end systems associate with 
access points. As end systems move from one access point to 
another access point, the access points will use a MAC hand off 
protocol to update their MAC address filter tables. The wireless 
hub at the cell site provides assistance to access points to perform 
this function. This assistance includes relaying MAC layer hand off 
messages (since access points will not be able to communicate 
directly over the MAC layer with each other) and authenticating the 
end system for MAC layer registration and hand off and for 
updating the MAC address filter tables of the access points. 
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7. The foreign agent for a wireless trunk sector is responsible for 
relaying frames from its trunk AP to the MSG and vice versa using 
the xtunnel protocol. Thus, the foreign agent for a trunk AP does 
not care about the location of the end system with respect to access 
points within that wireless trunk sector. In the down link direction, 
it just forwards frames from the mobile IP tunnel to the appropriate 
trunk AP which uses MAC layer bridging to send the frames to all 
the remote access points attached in that backhaul sector. The 
access points consult their MAC address filter tables and either 
forward the MAC frames over the access network or drop the MAC 
frames. As described above, the MAC address filter tables are kept 
up to date using MAC layer association and hand off procedures. 

In the up link direction, MAC frames are forwarded by the access 
points to the backhaul bridge which forwards them to the foreign 
agent in the wireless hub using the 802.3 link. 

8, ARP is not be used for sending or receiving IP packets to the 
remote access points. The access points determines the MAC 
address of the wireless hub using BOOTP procedures. Conversely, 
the wireless hub is configured with the MAC address of remote 
access points. UDPAP is used for network management of access 
points and for end system association and hand off messages. 

IEEE 802.3 links in the cell site may be replaced by higher speed links. 



FIG. 7 shows the protocol stack for a local access point. At the base of the 
stack is physical layer PHY. Physical layer PHY carries data to and from an end 
system as it is transmitted and received in a stream to and from the data modulator 
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and demodulator, respectively. When received from an end system, the AP 
receives data from the physical layer and unpacks it into MAC frames (Lhe MAC 
layer). The MAC frames are then repacked into an Ethernet physical layer fomat 
(IEEE 802.3 format) where it is send via the Ethernet link to the wireless hub. 
When the AP's processor receives data from the wireless hub via its Ethernet link 
(i.e. , the physical layer), the data to be transmitted io an end system, die AP packs 
the data in a medium access control (MAC) format, and sends the MAC layer data 
to its modulator to be transmitted to die end system. 

In FIG. 8, the MAC and PHY layers to/from the end system of FIG. 7 are 
replaced by a MAC and PHY for the trunk to the ceil site for a remote access 
point. Specifically, for a Tl tnink, the high level data link control protocol 
(HDLC protocol) is preferably used over die Tl . 

FIG. 9 depicts the protocol stack for the wireless hub lhat bridges die 
backhaul line and the trunk to the remote access point. The trunk to the remote 
APs are only required to support remote access points (as distinct from Ediernet 
coupled access points). The MAC and PHY layers for the wireless trunk to the 
remote APs provide a point to multipoint link so that one trunk may be used to 
communicate with many remote APs in die same sector. 

The wireless hub bridges the trunk to die remote APs and the backhaul line 
(e.g., Tl or T3) to the network's mobile switching center (MSC). The protocol 
stack in the wireless hub implements MAC and PHY layers to the MSC on top of 
which is implemented an IP layer (Internet Protocol) on top of which is 
implemented a UDP layer (Universal Datagram Protocal, in combination refered 
to as UDP/IP) for network management on top of which is implemented an 
XTunnel protocol. The XTunnel protocol is a new format that includes aspects of 
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the proposed IETF Mobile IP standard and aspects of the Level 2 Tunnel Protocol 
(L2TP). The XTunnel protocol is used to communicate from the wireless hub to 
the MSC and between inter-working functions (IWFs) in different networks or the 
same network. 

In FIG. 10, the protocol stack for the relay function in the base station for 
supporting remote access points is shown. The relay function includes an interface 
to the backhaul line (depicted as the wireless hub) and an interface to die remote 
AP (depicted as a trunk AP). From the point of view of the wireless hub, the 
trunk AP (depicted in FIGS. 7 and 10) actually behaves like the AP depicted in 
FIG. 7. Preferably, the base station protocol stacks are split up into a wireless 

hub and a trunk AP with an Ethernet in between. In an N-sector wireless trunk, 
there are N wireless trunk APs in the cell site and one wireless hub. 

In FIG. U, the base station protocol stack for a cell architecture using a 
local AP is shown. The relay function includes an interface to the backhaul line 
(depicted as the wireless hub) and an air link interface to the end system (depicted 
as an AP). From the point of view of the wireless hub, the AP (depicted in FIGS. 
8 and 11) actually behaves like the trunk AP depicted in FIG. 8. Preferably, the 
base station protocol stacks are split up into a wireless hub and a trunk AP with an 
Ethernet in between. In a N-sector cell, there are N access points and a single 
wireless hub. 

The backhaul network from the base station to the MSC has the following 
attributes. 
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1. The network is enable of routing IP datagrams between the base 
station and the MSG. 

2. The network is secure. It is not a public internet. Traffic from 
trusted nodes only are allowed onto the network since the network 
will be used for not only transporting end system traffic, but also 
for transporting authentication, accounting, registration and 
management traffic, 

3. The network has the necessary performance characteristics. 

In typical application, the service provider is responsible for installing and 
maintaining the backhaul network on which the equipment is installed. 

The base stations supports die following backhaul interfaces for 
communicating with the MSC. 

1 . Base stations support IP over PPP with HDLC links using point to 
point Tl or fractional T3 links. 

2. Base stations support IP over frame relay using T] or fractional T3 
links. 

3. Base stations support IP over AAL5/ATM using Tl or fractional T3 
links. 

Since all of the above interfaces are based on IETF standard 
encapsulations, commercial routers may be used in the MSC to terminate the 
physical links of the backhaul network. Higher layers are passed on and processed 
by the various servers and other processors. 
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End system registration procedures above the MAC layer are supported. In 
the following, end system registration procedures at the MAC layer are ignored 
except where they impact the layers above. 

End systems may register for service on their home network or from a 
foreign network. In both scenarios, the end system uses a foreign agent (FA) in 
the base station to discover a point of attachment to the network and to register. 
In the former case, the FA is in the end system's home network. In the latter 
case, the FA is in a foreign network. In either case, the network uses an IWF in 
the end system's home network as an anchor point (i.e., unchanging throughout 
the session in spite of mobility). PPP frames to and from the end system travel 
via the FA in the base station to the IWF in the home network. If the end system 
is at home, the home IWF is directly connected by means of the xtwmel protocol 
to the base station. If the end system is roaming, a serving IWF in the foreign 
network is connected to the home IWF over an I-interfece. The serving IWF 
relays frames between the base station and the home TWF. From the home IWF, 
data is sent to a PPP server which may reside in the same IWF or to a separate 
server using the L2TP protocol. The separate server may be owned and operated 
by a private network operator (e.g. ISP or corporate intranet) who is different 
from the wireless service provider. For the duration of the session, the location of 
the home IWF and the PPP server remains fixed. If die end system moves while 
connected, it will have to re-register with a new foreign agent. However, the 
same home IWF and PPP server continues to be used. A new xtunnel is created 
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between the new FA and the IWF and the old xtunnel between the old foreign 
agent and the IWF is destroyed. 

FIG. 12 shows this network configuration for two end systems A and B, 
both of whose home wireless network is wireless service provider A (WSP-A). 
One end system is registered from the home wireless network and the other from a 
foreign wireless network. The home IWF in WSP-A serves as the anchor point 
for both end systems. For both end systems, data is relayed to the home IWF. 
The home IWF connects to an internet service provider's PPP server owned by 
ISP-A. Here it is assumed that both end systems have subscribed tu the same ISP. 
If that were not (he case, then the home IWF would be shown also connected to 
another ISP. 

Within a wireless service providers network, data between base stations 
and the IWF is carried using the xtunnel protocol. Data between the IWF and the 
PPP server is carried using Level 2 Tunneling Protocol (L2TP). Data between the 
serving IWF and the home IWF is carried using the I-xtunnel protocol 

Always using an IWF in the home network has its advantages and 
disadvantages. An obvious advantage is simplicity. A disadvantage is that of 
always having to relay data to and from a possibly remote home IWF. The 
alternative is to send all the necessary information to the serving IWF so that it 
may connect to the end system's ISP/intranet and for the serving IWF to send 
accounting information in near real time back to the accounting server in the home 
network. This functionality is more complex to implement, but more efficient 
because it reduces the need to relay data over potentially long distances from the 
foreign network to the home network. 
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For example, consider a case of a user who roams from Chicago to Hong 
Kong. If the user's home network is in Chicago and the user registers using a 
wireless service provider in Hong Kong, then in the first configuration, the anchor 
point will be the home IWF in Chicago and all data will have to be relayed from 
Hong Kong to Chicago and vice versa. The home IWF in Chicago will connect to 
the user's ISP in Chicago. With the second configuration, the end system user 

will be assigned an ISP in Hong Kong. Thus, data will not always have to be 
relayed back and forth between Chicago and Hong Kong. In the second 
configuration, the serving IWF will serve as the anchor and never change for the 
duration of the session even if the end system moves. However, the location of 
the FA may change as a result of end system movement in Hong Kong. 

FIG. 13 shows die second network configuration. In this figure, the home 
network for end system A and B is WSP-A. End system A registers from its 
home network, using its home IWF as an anchor point, and also connects to \i$ 
ISP-A using the ISPs PPP server. End system B registers from the foreign 
network of WSP-B and uses a serving IWF which serves as the anchor point and 
connects the end system to an ISP using the ISP's PPP server. In this 
configuration, data for end system B does not have to be relayed from the foreign 
network to the home network and vice versa. 

In order for this configuration to work, not only must there be roaming 
agreements between the home and the foreign wireless service providers, but there 
also must be agreements between the foreign wireless service provider and the end 
system's internet service provider directly or through an intermediary. In the 
example above, not only must the wireless service provider in Hong Kong have a 
business agreement with the wireless service provider in Chicago, but the WSP in 
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Hong Kong must have a business agreement with the user's Chicago ISP and 
access to the Chicago ISPs PPP server in Hong Kong or a business agreement with 
another ISP locally in Hong Kong who has a business agreement for roaming with 
the user's Chicago ISP. Additionally, the WSP in Hong Kong must be able to 
discover these roaming relationships dynamically in order to do user authentication 
and accounting and io set up the appropriate tunnels. 

It is difficult for those companies who are in the Internet infrastructure 
business to work out suitable standards in the IETF for all of these scenarios. 
Thus, a preferable embodiment for the present invention is to implement the 
simpler, potentially less efficient configuration, where the IWF in the home 
network is always used as the anchor point. However, in the presence of suitable 

industry standardization of protocols for Internet roaming, the second 
configuration should be regarded as equivalent or alternative embodiment. 

An end system will have to register with the wireless network before it can 
start PPP and send and receive data. The end system first goes through the FA 
discovery and registration phases. These phases authenticate and register the end 
system to the wireless service provider. Once these phases are over, the end 
system starts PPP. This includes the PPP link establishment phase, the PPP 
authentication phase and the PPP network control protocol phase. Once these 
phases are over, the end system is able to send and receive IP packets using PPP. 

The following discussion assumes that the end system is roaming and 
registering from a foreign network. During the FA discovery phase, the end 
system (through its user registration agent) solicits an advertisement from the 
foreign agent. The user registration agent uses advertisement messages sent by a 
near by foreign agent to discover the identity of the FA and to register. During 
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this phase, the user registration agent of the end system selects the FA's care-of- 
address and issues a registration request to it. The FA acting as a proxy 
registration agent forwards the registration request to its registration server (the 
registration server in the foreign WSP). The registration server uses User-Name 
from the user registration agent's request to determine the end system's home 
network, and forwards the registration request for authentication to a registration 
server in the home network. Upon receiving the registration request relayed by 
the foreign registration server, the home registration server authenticates the 
identity of die foreign registration server and also authenticates the identity of the 
end system. If authentication and registration succeeds, the home registration 
server selects an IWF in the home network to create an I-xtunnel link between the 
home IWF and the serving IWF (in die foreign WSP). The IWF in the home 
network serves as the anchor point for the duration of the PPP session. 

Once the mobile IP authentication and registration phases are over, the 
various PPP phases will be started. At the start of PPP, an L2TP connection is 
created between the home IWF and requested the ISP/intranet PPP server. In the 

PPP authentication phase, PPP passwords using PAP or CHAP are exchanged and 
the ISP or intranet PPP server independently authenticates the identity of the end 
system. 

Once this succeeds, the PPP network control phase is started. In diis 
phase, an IP address is negotiated and assigned to the end system by the PPP 
server and the use of TCP/IP header compression is also negotiated. When this is 
complete, the end system is able to send and receive IP packets using PPP to its 
ISP or a corporate intranet. 
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Note that two levels of authentication are performed. The mobile IP 
authentication authenticates the identity of the end system to the registration server 
in the home network and the identities of the foreign network and the home 
network to each other. To perform this Junction, the foreign agent forwards the 
end system's registration request using, for example, an IETF Radius protocol to a 
registration server in its local MSC in a Radius Access-Request packet. Using the 
end system's domain name, the foreign registration server determines the identity 
of the end system's home network and home registration server, and acting as a 
Radius proxy, encapsulates and forwards the request to the end system's home 
registration server. If the foreign registration server cannot determine the identity 
of the end system's home, it may optionally forward the Radius request to a 
registration server that acts like a broker (e.g. one that is owned by a consortium 
of wireless service providers), which can in turn proxy the Radius Access-Request 
to the final home registration server. If the local registration server is unable to 
service the registration request locally or by proxying, then it rejects the foreign 
agent's registration request and the foreign agent rejects the end system's 
registration request. Upon receiving the Radius Access-Request, the home 
registration server performs the necessary authentication of the identities of the 
foreign network and the end system. If authentication and registration succeeds, 
the home registration server responds with a Radius Access -Response packet to the 
foreign registration server which sends a response to the foreign agent so that a 
round trip can be completed. The registration request is rejected if the home 
registration server is unable to comply for any reason. 

The second level of authentication verifies the identity of the end system to 
the intranet or ISP PPP server. PPP authentication, separate from mobility 
authentication allows the infrastructure equipment to be deployed and owned 
separately from the ISP. 
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FIG. 14 is a ladder diagram showing the registration sequence for a 
roaming end system. It is assumed that the PPP server and the home IWF are in 
the same server and L2TP is not required. Note the interactions with accounting 
servers to start accounting on behalf of the registering end system and also 
directory servers to determine the identity of the home registration server and to 
authenticate the end system's identity. More information on accounting, billing, 
roaming (between service providers) and settlement will be provided below. 

MAC layer messages (e.g. 802.11 beacon) from the user registration agent 
of the end system initiate Agent Solicitation. The MAC layer messages are not 
shown for clarity. 

In FIG. 14, the end system (mobile) initially solicits an advertisement and 
the foreign agent replies with an advertisement that provides the end system with 
information about the network to which the foreign agent belongs including a care- 
of-address of the foreign agent. In this case, the network is assumed to be a 
foreign wireless service provider. Then, a user registration agent (in the end 
system) incorporates the information about the foreign agr.nt (including the care- 
of-address) and its network into a request and sends the request to the foreign 
agent. The foreign agent, as a proxy registration agent, relays the request to the 
foreign registration server (i.e. , the registration server for the foreign wireless 
service provider. Then, the foreign registration server, recognizing that it is not 
the home directory, accesses the foreign directory server widi the FDD in the 
foreign wireless service provider to learn how to direct the registration request to 
the home registration server of the wireless service provider to which the end 
system belongs. The foreign registration server responds with the necessary 
forwarding information. Then, the foreign registration server encapsulates the end 
system's registration request in a Radius access request and relays the encapsulated 
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request to the home registration server of the wireless service provider to which 
the end system belongs. The home registration server accesses the home directory 
server with the HDD of the home registration server to learn at least authentication 
information about the foreign service provider. Optionally, the home registration 
server accesses the subscriber's directory to learn detail subscriber service profile 
information (e.g. , quality of service options subscribed to, etc.). When all parties 
arc authenticated, the home registration server sends a start IWF request to the 
home IWF and PPP server. The home IWF and PPP server starts the home 
accounting server and then sends a start IWF response to the home registration 
server. The home registration server then sends a Radius access response to the 
foreign registration server. The foreign registration server then sends a start IWF 
request to the serving IWF server. The serving IWF server starts the serving 
accounting server and then sends a start IWF response to the foreign registration 
server. The foreign registration server sends a registration reply to the foreign 
agent, and the foreign agent relays the registration reply to the end system. 

A link control protocol (LCP) configuration request is send by the end 
system through the foreign registration server to the home IWF and PPP server. 
The home IWF and PPP server sends an LCP configuration acknowledgment 
through the foreign registration server to the end system. 

Similarly, a password authentication protocol (PAP) authentication request 
is sent to and acknowledged by the home IWF and PPP server. Alternatively, a 
challenge authentication protocol (CHAP) may be used to authenticate. Both 
protocols may be used to authenticate or this phase may be skipped. 

Similarly, an IP configuration protocol (IPCP) configure request is sent to 
and acknowledged by the home IWF and PPP server. 
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The connection to the end system may be terminated because of any one of 
the following reasons. 

1. User initiated termination. Under this scenario, the end system first 
terminates the PPP gracefully. This includes terminating the PPP 

network control protocol (IPCP) followed by terminating the PPP 
link protocol. Once this is done, the end system de-registers from 
the network followed by termination of the radio link to the access 
point. 

2. Loss of wireless link. This scenario is detected by the modem and 
reported to the modem driver in the end system. The upper layers 
of the software are notified to terminate the stacks and notify the 
user. 

3. Loss of connection to the foreign agent. This scenario is detected 
by the mobility driver in the end system. After trying to re- 
establish contact with a (potentially new) foreign agent and failing, 
the driver sends an appropriate notification up the protocol stack 
and also signals the modem hardware below to terminate the 
wireless link. 

4. Loss of connection to the IWF. This is substantially the same as for 
loss of connection to the foreign agent. 

5. Termination of PPP by IWF or PPP server. This scenario is 
detected by the PPP software in the end system. The end systems 
PPP driver is notified of this event. It initiates de-registration from 
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the network followed by termination of the wireless link to the 
access point. 

End system service configuration refers to the concept of configuring the 
network service for an end system based on die subscriber's service profile. The 
subscriber's service profile is stored in a subscriber directory. The service profile 
contains information to enable the software to customize wireless data service on 
behalf of the subscriber. This includes information to authenticate the end system, 
allow the end system to roam and set up connections to the end system's internet 
service provider. Preferably, this information also includes other parameters, like, 
quality of service. In addition to the subscriber directory, a home domain 

directory (HDD) and a foreign domain directory (FDD) are used for roaming and 
for authenticating the foreign and home registration servers to each other. The 
HDD stores information about the end system's home network and the FDD stores 
information about foreign networks that a subscriber may visit. 

FIG. 15 shows how these directories map into the network architecture and 
are used during registration for an end system that is registering at home. In step 
0 the end system (mobile) solicites an advertisement and the foreign agent 
advertises to provides die end system with information about the network to which 
the foreign agent belongs. In this case, die network is the home wireless service 
provider. In step 1, user registration agent (in the end system) incorporates the 
information about the foreign agent and its network into a request and sends the 
request to the foreign agent. In step 2, the foreign agent, as a proxy registration 
agent, relays the request to the home registration server. In step 3, the home 
registration server accesses the HDD of the home wireless service provider to 
learn at least authentication information. In step 4, the home registration server 
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accesses the subscriber directory to learn detail subscriber service profile 
information (e.g., quality of service options subscribed to, etc.). In step 5, the 
home registration server notifies the foreign agent of the access response. In steps 
6 and 7, the foreign agent notifies the end system (i.e., mobile) of the registration 
reply. 

FIG. 16 shows directory usage for an end system that is registering from a 
foreign network. In step 0 the end system (mobile) solicites an advertisement and 
the foreign agent adverstises to provides the end system with information about the 
network to which the foreign agent belongs. In this case, the network is a foreign 
wireless service provider. In step 1, user registration agent (in the end system) 
incorporates the information about the foreign agent and its network into a request 
and sends the request to the foreign agent. In step 2, the foreign agent, as a proxy 
registration agent, relays the request to the foreign registration server (i.e., the 
registration server for the foreign wireless service provider. In step 3, the foreign 
registration server accesses the HDD of foreign wireless service provider to learn 
the network to which the end system belongs. In step 4, the foreign registration 
server forwards the end system's request lo the home registration server of the end 
system's home wireless service provider. In step 5, the home registration server 
accesses the FDD of the home registration server to learn at least authentication 
information about the foreign service provider. In step 6, the home registration 
server accesses the subscriber's directory to learn detail subscriber service profile 
information (e.g., quality of service options subscribed to, etc.). In step 7, the 
home registration server notifies the foreign registration server of the access 
response. In step 8, the foreign registration server forwards to the foreign agent 
the access response. In step 9, the foreign agent notifies the end system (i.e. , 
mobile) of the registration reply. 
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Protocol handling scenarios for handling bearer data and the associated 
stacks for transporting bearer data to and from an end system, the protocol stacks 
for the cell architectures using local APs (FIG. 17) and remote APs (FIG. 18). 

FIG. 17 shows die protocol stacks for handling communications between 
an end system (in its home network) and a home IWF for End System @ Home. 
FIG. 17 shows the protocol handling for a cell architecture where the access point 
and the wireless hub are co-located. 

FIG. 18 shows (he protocol handling for a cell architecture where the 
access point is located remotely from the wireless hub. As shown, PPP terminates 
in the IWF and the configuration provides direct internet access. The 
configuration for the case where the PPP server is separate from the IWF is 
described later. 

In FIG. 18, PPP frames from the end system are encapsulated in RLP 
(radio link protocol) frames which are encapsulated at the remote access point in 
MAC frames for communicating with the trunk access point (i.e., an access point 
physically located near the wireless hub), the remote access point being coupled to 
the access point by, for example, a wireless trunk). The access point functions as 
a MAC layer bridge and relays frames from the air link to the foreign agent in the 
wireless hub. The foreign agent de-encapsulates the RLP frames out of the MAC 
frames, and using the xtunnel protocol, relays the RLP frames to the IWF. A 

similar, albeit reverse, process occurs for transmitting frames from the IWF to the 
end system. 
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If the end system moves to another foreign agent, then a new xtunnel will 
be automatically created between the new foreign agent and the IWF, so that PPP 
traffic continues to flow between them, without interruption. 

In the remote AP cell architecture (FIG. 18) using wireless trunks between 
the remote AP and the trunk AP, the air link between the end system and the 
access point may operate at a different frequency (f 1) and use a different radio 
technology as compared to the frequency (f2) and radio technology of the trunk. 

FIG. 19 shows the protocol stacks for a roaming end system. The serving 
IWF uses of the I-xtunnel protocol between the serving IWF and home 1WF. The 
rest of the protocol stacks remain unchanged and are not shown. 

The RLP layer uses sequence numbers to drop duplicate PPP datagrams 
and provide in-sequence delivery of PPP datagrams between the end system and 
the IWF. It also provides a configurable keep-alive mechanism to monitor link 
connectivity between the end system and the IWF. Additionally, in an alternative 
embodiment, the RLP layer also provides re transmission and flow control 
services in order to reduce the overall bit error rate of the link between the end 
system and the IWF. The RLP between the end system and the IWF is started at 
the beginning of the session and remains active throughout the session and even 
across hand-offs. 

In contrast to the specification in the mobile IP RFC (RFC 2003), IP in IP 
encapsulation is not used for tunneling between the foreign agent and the home 
agent. Instead a new tunneling protocol, implemented on top of UDP is used. 
This tunneling protocol is a simplified version of die L2TP protocol. The reasons 
for this choice arc as follows. 
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L The encapsulation protocol specified in RFC 2003 does not provide 
flow control or in-sequence delivery of packets. The presently 
described network may need these services in the tunnel over the 
backhaul. Flow control may be needed to reduce the amount of re- 
transmissions over the air link because of packet loss due to flow 
control problems over the network between the base station and the 
MSC or because of flow control problems in the base station or the 
IWR 

I. By using a UDP based tunneling protocol, the implementation can 
be done at the user level and then put into the kernel for 
performance reasons, after it has been debugged. 

J. Using RFC 2003, there is no easy way of creating tunnels taking 
into account quality of service and load balancing. In order to take 
QOS into account, it should be possible to set up tunnels over links 
that already provide the required QOS. Secondly, using RFC 2003, 
there is no easy way to provide load balancing to distribute bearer 
traffic load over multiple links between the base station and the 
MSC, 

In order to implement IP in IP encapsulation as specified in RFC 
2003, developers require access to IP sourte code. Tn commercial 
operating systems, source code for the TCP/IP stack is generally 
proprietary to other equipment manufacturers. Purchasing the 
TCP/IP stack from a vendor and making changes to the TP layer to 
support mobile IP tunneling would require a developer to continue 
supporting a variant version of the TCP/IP stack. This adds cost 
and risk. 
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While it is noted that the tunneling protocol between the base station and 
die IWF is non-standard and that the wireless service provider will not be able to 
mix and match equipment from different vendors, die use of a non-standard 
tunneling protocol within a single wireless service provider network is transparent 
to end systems and equipment from other vendors. 

The new tunneling protocol is based on L2TP. By itself, L2TP is a 
heavyweight tunneling protocol so that L2TP has a lot of overhead associated with 
tunnel creation and audientication. The new tunneling protocol of die present 
invention has less overhead. The new xtunnel protocol has the following 
features. 

L The xtunnel creation adds vendor specific extensions to Radius 

Access Request and Radius Access Response messages between the 
base station and the registration server. These extensions negotiate 
tunnel parameters and to create the tunnel. 

2. The registration server is able to delegate the actual work of 
tunneling and relaying packets to a different IP address, and 
therefore, to a different server in the MSC. This permits die 
registration server to do load balancing across multiple IWF servers 
and to provide different QOS to various users. 

3. The xtunnel protocol supports in-band control messages for tunnel 
management. These messages include echo request/response to test 
tunnel connectivity, disconnect request/response/notify to 
disconnect the tunnel and error notify for error notifications. These 
messages are sent over the tunneling media, for example, UDP/IP. 
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4. The xtunnel protocol sends payload data over the tunneling media, 
for example, UDP/IP. The xtunnel protocol supports flow control 
and in-sequence packet delivery. 

5. The xtunnel protocol may be implemented over media other than 
UDP/IP for quality of service. 

The network supports direct internet connectivity by terminating the PPP in 
the home IWF and routing IP packets from the IWF to the internet via a router 

using standard IP routing techniques. Preferably, the IWF runs RIP, and the 
router also runs RIP and possibly other routing protocols like OSPF. 

The network supports a first configuration for a wireless service provider 
who is also an internet service provider. In this configuration, the home IWF in 
the MSG also functions as a PPP server. This IWF also runs internet routing 
protocols like RIP and uses a router to connect to the internet service providers 
backbone network. 

The network supports a second configuration for a wireless service 
provider who wishes to allow end systems to connect to one or more internet 
service providers, either because the WSP itself is not ISPs, or because the WSP 
has agreements with other ISPs to provide access to end users. For example, a 
wireless service provider may elect to offer network access to an end user and may 
have an agreement with a 3 rU party ISP to allow the user who also has an account 
with the 3 rd party ISP to access the ISP from the WSP network. In this 
configuration, the PPP server does not run in the home IWF installed at the MSC. 
Instead, a tunneling protocol like L2TP (Layer Two Tunneling Protocol) is used 
to tunnel back to the ISP's PPP server. FIG. 10 shows the protocol stacks for this 
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configuration for an end system that is at home. 

The location of the home IWF and the ISP PPP server remains fixed 
throughout the PPP session. Also, the L2TP tunnel between the 1WF and the 
ISP's PPP server remains up throughout the PPP session. The physical link 
between the IWF and the PPP server is via a router using a dedicated Tl or T3 or 
frame relay or ATM network, The actual nature of the physical link is not 
important from the point of view of the architecture. 

This configuration also supports intranet access. For intranet access, the 
PPP server resides in the corporate intranet and the home IWF uses L2TP to 
tunnel to it. 

For a roaming end system, the protocol handling for intranet or ISP access 
is as shown in FIG. 20 with the difference that the roaming end system uses a 

serving IWF to connect to its home IWF, The protocol handling between a 
serving IWF and a home IWF has been described earlier. 

FIG. 21 shows the protocol stacks used during the registration phase (end 
system registration) for a local AP cell architecture. The stack for a remote AP 
cell architecture is very similar. 

The scenario shown above is for a roaming end system. For an end system 
at home, there is no foreign registration server in the registration path. 

Note the mobility agent in the end system. The mobility agent in the end 
system and foreign agent in the wireless hub are conceptually similar to the mobile 
IP RFC 2002. The mobility agent handles network errors using time-outs and re- 
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trys. Unlike die known protocol stacks for bearer data, RLP is not used. The 
foreign agent and the registration servers use Radius over UDP/IP to communicate 
with each other for registering the end system. 

Several aspects of security must be considered. The first, authenticating 
the identities of the end system and the foreign/home networks during the wireless 
registration phase. Second, authenticating the identity of the end system with its 
PPP server during the PPP authentication phase. Third, authentication for storing 
accounting daia, for billing and for updating home domain information. Fourth, 
encryption of bearer traffic transmitted to and from the end system. Fifth, 
encryption for exchanging billing information across service provider boundaries. 

Shared secrets are used to authenticate the identity of end systems with 
their home networks and the identity of the home and foreign networks with each 
other during wireless registration. 

End system authentication uses a 128-bit shared secret to create an 
authenticator for its registration request. The authenticator is created using the 
known MD5 message digest algorithm as described in the mobile TP RFC 2002. 
The shared secret is not sent in the registration request by the end system. Only 
the authenticator is sent. On receiving the registration request from the end 
system, the home registration server re-computes the authenticator over the 
registration request data using the shared secret. If the computed authenticator 
value matches the authenticator value sent by the end system, the home 
registration server allows the registration process to proceed, if the values do not 
match, the home rcgistiation server logs the event, generates a security violation 
alarm and a nak (i.e., a negative acknowledgment) to the request. 
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In the registration reply, the home registration server does the same - that 
is to say, uses the shared secret to create an authenticator for the registration reply 
that it sends to die end system. Upon receiving the reply, the end system re- 
computes the authenticator using the shared secret. If the computed value does not 
match the authenticator value sent by the home registration server in the reply, the 
end system discards the reply and tries again. 

These network security concepts are similar to the concepts defined in 
mobile rP RFC 2002. According to the RFC, a mobility security association exist 
between each end system and its home network. Each mobility security 
association defines a collection of security contexts. Each security context defines 
an authentication algorithm, a mode, a secret (shared or public-private), style of 
replay protection and the type of encryption to use. In the context of the present 
network, the end system's User-Name (in lieu of the home address) is used to 
identify ihe mobility security association between the end system and its home 
network. Another parameter, called the security parameter index (SPI), is used to 
select a security context within the mobility security association. In a basic 
embodiment of the invention, only the default mobile TP authentication algorithm 
(keyed-MD5) and the default mode ("prefix* suffix") are supported with 128 bit 
shared secrets. Network users are allowed to define multiple shared secrets with 
their home networks. The mechanism for creating security contexts for end users, 
assigning an SPI to each security context and for setting the contents of the 
security context (which includes the shared secret) and for modifying their 
contents are described below. During registration, a 128 bit message digest is 
computed by the end system in prefix + suffix mode using the MD5 algorithm. 
The shared secret is used as the prefix and the suffix for the data to be protected in 
the registration request. The authenticator thus computed, along with the SPI and 
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the User-Name are transmitted in the registration request by the end system. Upon 
receiving the end system's registration request, the foreign registration server 
relays die request along widi die authenticator and the SPI, unchanged to the home 
legislation server. Upon receiving the registration request directly from the end 
system or indirecdy via a foreign registration server, the home registration server 
uses the SP1 and die User-Name tu select the security context. The home server 
re-computes the authenticator using the shared secret. If the computed 
authenticator value matches the value of the authenticator sent in the request by the 
end system, the user's identity will have been successfully authenticated. 
Otherwise, die home registration server naks (negatively acknowledges) the 
registration request sent by the end system. 

The registration reply sent by the home registration server to the end 
system is also authenticated using the mobile IP algorithm described above. The 
SPI and the computed authenticator value is transmitted in the registration reply 
message by the home scrvei to the end system. Upon receiving the reply, the end 
system re-computes the authenticator, and if the computed value does not match 
die transmitted value, it will discard the reply and retry. 

The user's end system has to be configured with the shared secret and SPls 
for all security contexts that the user shares with its registration server (s). This 
configuration information is preferably stored in a Win 95 registry for Windows 
95 based end systems. During registration, this information is accessed and used 
for authentication purposes. 

In the network, Radius protocols are used by foreign agent FA to register 
the end system and to configure die xtunnel between the wireless hub and the 
home and serving IWFs on behalf of die end system. On receiving a registration 
request from the end system, the FA creates a Radius Access-Request packet, 
stores its own attributes into the packet, copies the end system's registration 
request attributes unchanged into this packet and sends the combined request to the 
registration server in the MSG. 
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Radius authentication requires that the Radius client (in this case, the FA in 
the base station) and the Radius server (in this case, the registration server in the 
MSC) share a secret for authentication purposes. This shared secret is also used to 
encrypt any private information communicated between the Radius client and the 
Radius server. The shared secret is a configurable parameter. The network 
folluws the recommendations in the Radius RFC and uses the shared secret and the 
MD5 algorithm for authentication and for encryption, where encryption is needed. 
The Radius Access Request packet sent by the FA contains a Radius User-Name 
attribute (which is provided by the end system) and a Radius User-Password 
attribute. The value of the User Password attribute is also a configurable value 
and encrypted in the way recommended by die Radius protocol. Other network 
specific attributes, which are non-standard attributes from the point of view of the 
Radius RFC standards, are encoded as vendor specific Radius attributes and sent 
in the Access-Request packet. 

The following attributes are sent by the FA to its registration server in the 
Radius Access-Request packet. 

1. User-Name Attribute. This is the end system's user-name as 
supplied by the end system in its registration request. 

2. User-Password Attribute. This user password is supplied by the base 
station/wireless hub on behalf of the user. It is encoded as 
described in the Radius EFC using the secret shared between the 
base station and its registration server. 

3. NAS-Port. This is the port on the base station. 

4. NAS-fP-Address. This is the IP address of the base station. 

5. Service-Type, This is framed service. 

6. Framed Protocol. This is a PPP protocol. 
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7. Xtunnel Protocol Parameters, These parameters are sent by the 
base station to specify the parameters necessary to set up the xtunnel 
protocol on behalf of the end system. This is a vendor-specific 
attribute. 

8. AP-IP-Address. This is the IP address of the AP through which the 
user is registering. This is a vendor-specific attribute. 

9. AP-MAC-Address. This is the MAC address of the AP through 
which the user is registering. This is a vendor-specific attribute. 

10. End system 's Registration Request, The registration request from 
the end system is copied unchanged into this vendor specific 
attribute. 

The following attributes are sent tu the FA from the registration server in 
the Radius Access-Response packet. 

L Service Type, This is a framed service. 

2. Framed-ProtocoL This is a PPP. 

3. Xtunnel Protocol Parameters, These parameters are sent by the 
registration server to specify the parameters necessary to set up the 
xtunnel protocol on behalf of the end system. This is a vendor- 
specific attribute. 

4. Home Registration Server's Registration Reply, This attribute is sent 
to the FA from the home registration server. The FA relays this 
attribute unchanged to the end system in a registration reply packet. 
If there is a foreign registration server in the path, this attribute is 
relayed by it to the FA unchanged. It is coded as a vendor-specific 
attribute. 
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To provide service to roaming end systems, the foreign network and the 
home network are authenticated to each other for accounting and billing purposes 
using the Radius protocol for authentication and configuration. This authentication 
is performed at the time of end system registration. As described earlier, when 
the registration server in the foreign network receives a registration request from 
an end system (encapsulated as a vendor specific attribute in a Radius-Access 
Request packet by the FA), it uses the end systern=s User-Name to determine the 
identity of the end system=s home registration server by consulting its home 
domain directory HDD. The following information is stored in home domain 
directory HDD and accessed by the foreign registration server in order to forward 
the end system's registration request 

1 . Home Registration Server IP Address. This is the IP address of the 
home registration server to forward the registration request. 

7. Foreign Registration Server Machine Id. This is the machine ID of 
the foreign registration server in SMTP (simplified mail transfer 
protocol) format (e.g., machine@fqdn where machine is the name 
of the foreign registration server machine and fqdn is the fully 
qualified domain name of the foreign registration server's domain). 

3. Tunneling Protocol Parameters. These aic parameters for 
configuring the tunnel between the serving IWF and the home IWF 
on behalf of the end system. These include the tunneling protocol 
to be used between them and the parameters for configuring the 
tunnel. 

4. Shared Secret. This is the shared secret to be used for uthentication 
between the foreign registration server and the home registration 
server. This secret is used for computing the Radius User-Password 
attribute in the Radius packet sent by the foreign registration server 
to the home registration server. It is defined between the two 
wireless service providers. 
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5. User-Password. This is the user password to be used on behalf of 
the roaming end system. This usei password is defined between the 
two wireless service providers. This password is encrypted using 
the shared secret as described in the Radius RFC. 

6. Accounting Parameters. These are parameters for configuring 
accounting on behalf of the end system that is registering. These 
parameters are sent by (he registration server to its IWF for 
configuring accounting on behalf of the end system. 

Using this information, the foreign registration server creates a Radius 
Access-Request, adds its own registration and authentication information into the 
Radius Access-Request, copies the registration information sent by the end system 
unchanged into the Radius Access -Request and sends the combined request to the 
home registration server. 

Upon receiving the Radius-Access Request from the foreign registration 
server (for a roaming end system) or directly from the FA (for an end system at 
hume), the home registration server consults its own directory server for the 
shared secrets to verify the identity of the end system and the identity of the 
foreign registration server in a roaming scenario by re-computing authenticators. 

After processing the request successfully, the home registration server 
creates a Radius Access- Accept response packet and sends it to the foreign 
registration sa ver if the end system is roaming, or directly to the FA from which 
it received the Radius Access-Request. The response contains the registration 
reply attribute that the FA relays to the end system. 

If the request can not be processed successfully, die home registration 
server creates a Radius Access-Reject response packet and sends it to the foreign 
registration server if the end system is roaming, or directly to the FA from which 
it received the Radius Access-Request. The response contains the registration 
reply attribute that the FA will relays to the end system. 
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In a roaming scenario, the response from the home registration server is 
received by the foreign registration seiver. It is authenticated by the foreign 
registration server using the shared secret. After authenticating, the foreign 
registration server processes the response, and in turn, it generates a Radius 
response packet (Accept or Reject) to send to the FA. The foreign registration 
server copies the registration reply attribute from the home registration server's 
Radius response packet, unchanged, into its Radius response packet. 

When the FA receives the Radius Access-Response or Radius Access - 
Reject response packet, it creates a registration reply packet using the registration 
reply attributes from the Radius response, and sends the reply to the end system, 
thus completing the round trip registration sequence. 

Mobile IP standards specifies that replay protection for registrations are 
implemented using time stamps, or optionally, using nonces. However, since 
replay protection using time stamps requires adequately synchronized time-of-day 
clocks between the corresponding nodes, the present invention implements replay 
protection during registration using nonces even though replay protection using 
time stamps is mandatory in the Mobile IP standards and the use nonces is 
optional. However, replay protection using time stamps as an alternative 
embodiment is envisioned. 

The style of replay protection used between nodes is stored in the security 
context in addition to the authentication context, mode, secret and type of 
encryption. 

The network supports the use of PPP PAP (password authentication) and 
CHAP (challenge authenticated password) between the end system and its PPP 
server. This is done independently uf the mobile IP and Radius based 
authentication mechanisms described earlier. This allows a private intranet or an 
ISP to independently verify the identity of the user. 
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Authentication for accounting and directory services is described below 
with respect to accounting security. Access to directory servers from network 
equipment in the same MSC need not be authenticated. 

The network supports encryption of bearer data sent between the end 
system and the home IWR End systems negotiate, encryption to be on or off by 
selecting the appropriate security context. Upon receiving the registration request, 
the home registration server grants the end system's request for encryption based 
upon the security context. In addition to storing the authentication algorithm, 
mode, shared secret and style of replay protection, the security context is also used 
to specify the style of encryption algorithm to use. If encryption is negotiated 
between the end system and the home agent, then the complete PPP frame is so 
enci ypled before encapsulation in RLP. 

The IWF, the accounting server and the billing system are part of the same 
trusted domain in the MSC. These entities are either connected on the same LAN 
or part of a trusted intranet owned and operated by the wireless service provider. 
Transfer of accounting statistics between the IWF and the accounting server and 
between the accounting server and the customer's billing system need not be 
encrypted. 

The network makes it more difficult to monitor the location of the end 
system because it appears that all PPP frames going to and from the end system go 
through the home IWF regardless of the actual location of the end system device. 

Accounting data is collected by the serving IWF and the home IWF in the 
network. Accounting data collected by the serving IWF is sent to an accounting 
server in the serving IWF's MSC. Accounting data collected by the home IWF is 
sent to an accounting server in the home IWF's MSC. The accounting data 
collected by the serving IWF is used by the foreign wireless service provider for 
auditing and for settlement of bills across wireless service provider boundaries (to 
support roaming and mobility). The accounting data collected by the home IWF is 
used for billing the end user and also for settlement across wireless service 
provider boundaries to handle roaming and mobility. 
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Since all data traffic flows through the home IWF, regardless of the end 
system's location and the foreign agent's location, the home IWF has all the 
information to generate bills for the customer and also settlement information for 
the use of foreign networks. 

The serving IWF and the home IWF preferably use the Radius accounting 
protocol for sending accounting records for registered end systems. The Radius 
accounting protocol is as documented in a draft IETF RFC. For the present 
invention, the protocol has to be extended by adding vendor specific attributes for 
the network and by adding check-pointing to the Radius Accounting protocol. 
Check-pointing in this context refers to the periodic updating of accounting data to 
minimize risk of loss of accounting records. 

The Radius accounting protocol runs over UDP/IP and uses re-trys based 
on acknowledgment and time outs. The Radius accounting client (serving IWFs or 
home IWFs) send UDP accounting request packets to their accounting servers 
which send acknowledgments back to the accounting clients. 

In the network, the accounting clients (serving IWF and the home IWF) 
emit an accounting start indication at the start of the user's session and an 
accounting stop indication at the end of the user's session. In the middle of the 
session, the accounting clients emit accounting checkpoint indications. In 
contrast, the Radius accounting RFC does not specify an accounting checkpoint 
indication. The software of the present invention creates a vendor specific 
accounting attribute for this purpose. This accounting attribute is present in all 
Radius Accounting-Request packets which have Acct-Status-Type of Start 
(accounting start indications). The value of this attribute is used to convey to thr- 
accounting server whether the accounting record is a check-pointing record or not. 
Check-pointing accounting reports have a time attribute and contain cumulative 
accounting data from the start of the session. The frequency of transmitting 
check-point packets is configurable in the present invention. 

The serving IWF and the home IWF are configured by their respective 
registration servers for connecting to their accounting serveis during the 
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registration phase. The configurable accounting parameters include the f P address 
and UDP port of the accounting server, the frequency of check-pointing, the 
session/multi-session id and the shared secret to be used between the accounting 
client and the accounting server. 

The network records the following accounting attributes for each registered 
end system. These accounting attributes are repoited in Radius accounting packets 
at the start of the session, at the end of the session and in the middle (check-point) 
by accounting clients to their accounting servers. 

1. User Name. This is like the Radius User-Name attribute discussed 
above. This attribute is used to identify the user and is present in 
all accounting reports. The format is "user ©domain" where 
domain is the fully qualified domain name of the user's home. 

2. NAS IP Address. This is like the Radius NAS I P- Address attribute 
discussed above. This attribute is used to identify the IP address of 
the machine running the home IWF or the serving IWF. 

3. Radio Port. This attribute identifies the radio port on the access 
point providing service to the user. This attribute is encoded as a 
vendor specific attribute. 

4. Access Point IP Address. This attribute identifies the IP address of 
the access point providing service to the user. This attribute is 
encoded as a vendor specific attribute. 

5. Service Type. This is like the Radius Service-Type attribute 
described above. The value of this attribute is Framed. 

6. Framed Protocol, This is like the Radius Framed Protocol attribute 
described above. The value of this attribute is set to indicate PPP. 

7. Accounting Status Type. This is like the Radius Acct-Status-Type 
attribute described above. The value of this attribute may be Start to 
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mark the start of a user's session with the Radius client and Stop to 
mark the end of the user's session with the Radius client. For 
accounting clients, the Acct-Status-Type/Start attribute is generated 
when the end system registers. The Acct-Status-type/Stop attribute 
is generated when the end system de-registers for any reason. For 
checkpoints, the value of this attribute is also Start and the 
Accounting Checkpoint attribute is also present. 

8. Accounting Session Id. This is like the Radius Acct-Sess ion-Id 
described above. In a roaming scenario, this session id is assigned 
by the foreign registration server when the end system issues a 
registration request. It is communicated to the home registration 
server by the foreign registration server during the registration 
sequence. The home network and the foreign network both know 
the Acct-Sess ion- Id attribute and are able to emit this attribute while 
sending accounting records to their respective accounting servers. 
In a "end system-at-home" scenario, this attribute is generated by 
the home registration server. The registration server communicates 
the value of this attribute to the IWF which emits it in all 
accounting records. 

9. Accounting Multi-Session Id. This is like the Radius Acct-Multi- 
Session-Id discussed above. This id is assigned by the home 
registration server when a registration request is received from a FA 
direcdy or via a foreign registration server on behalf of an end 
system. It is communicated to the foreign registration server by the 
home registration server in the registration reply message. The 
registration server(s) communicates the value of this attribute to the 
rWF(s) which emit it in all accounting records. 

Widi true mobility added to the architecture, the id is used to relate 
together the accounting records from different lWFs for the same end system if the 
end system moves from one IWF to another. For hand-offs across IWP 
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boundaries, the Acct-Sess ion-Id is different for accounting records emanating from 
different IWFs. However, the Acct-Multi-Session-Id attribute is die same for 
accounting records emitted by all IWFs that have provided service to the user. 
Since the session id and the muki-session id are known to both the foreign network 
and the home network, they are able to emit these attributes in accounting reports 
to their respective accounting servers. With the session id and the multi-session 
id, billing systems are able to correlate accounting records across IWF boundaries 
in the same wireless service provider and even across wireless service provider 
boundaries. 

1. Accounting Delay Time. See Radius Acct-Delay-Time attribute. 

2. Accounting Input Octets. See Radius Acct-Input-Octets. This 
attiibute is used to keep track of the number of octets sent by the 
end system (input to the network from the end system). This count 
is used to track the PPP frames only. The air link overhead, or any 
overhead imposed by RLP, etc. and is not counted. 

3. Accounting Output Octets. See Radius Acct Output-Octets. This 
attribute is used to keep track of the number of octets sent to the 
end system (output from the network to the end system). This 
count is used to track the PPP frames only. The air link overhead, 
or any overhead imposed by RLP, etc. and is not counted. 

4. Accounting Authentic. See Radius Acct- Authentic attribute. The 
value of this attribute is Local or Remote depending on whether the 
serving IWF or the home IWF generates the accounting record. 

5. Accounting Session lime. Sec Radius Acct-Session-Time attribute. 

This attribute indicates the amount of time that the user has been 
receiving service, if sent by the serving IWF, this attribute tracks 
the amount of time that the user has been receiving service from 
that serving FWF. If sent by the home IWF, this attribute tracks the 
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amount of time that the user has been i eceiving service from the 
home IWF. 

6. Accounting Input Packets. See Radius Acct Input-Packets attribute. 
This attribute indicates the number of packets received from the 
end system. Foi a serving IWF, this attribute tracks the number of 
PPP frames input into the serving IWF from an end system. For a 
home rWF, this attribute tracks die number of PPP frames input 
into the home IWF from an end system. 

7. Accounting Output Packets. See Radius Acet-Oulput-Packets 
attribute. This attribute indicates the number of packets sent to the 
end system. For a serving IWF, this attribute tracks the number of 
PPP frames output by the serving IWF to the end system. For a 
home IWF, this attribute tracks the number of PPP frames sent to 
the end system from the home IWF. 

8. Accounting Terminate Cause. See Radius Acct-Terminate-Cause 
attribute. This attribute indicates the reason why a user session was 
terminated. In addition, a specific cause code is also present to 
provide additional details. This attribute is only present in 
accounting reports at the end of the session. 

9. Network Accounting Terminate Cause. This attribute indicates a 
detailed reason for terminating a session. This specific attribute is 
encoded as a vendor specific attribute and is only reported in a 
Radius Accounting attribute at the end of session. The standard 
Radius attribute Acct-Terminate-Cause is also present. This 
attribute provides specific cause codes, not covered by the Acct- 
Terminate-Cause attribute. 

10. Network Air link Access Protocol. This attribute indicates the air 
link access protocol used by the end system. This attribute is 
encoded as a vendor specific attribute. 
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1 1 . Network Backhaul Access Protocol. This attribute indicates the 
backhaul access protocol used by the access point to ferry data to 
and from the end system. This attribute is encoded as a vendor 
specific attribute, 

12. Network Agent Machine Name. This attribute is the fully qualified 
domain name of the machine running the home IWF or the serving 
IWR Tins specific attribute is encoded in vendor specific format. 

13. Network Accounting Check-point. Since the Radius accounting 
RFC does not define a check-point packet, the present network 
embodiment uses a Radius accounting start packet with this attribute 
to mark a check-point. The absence of a check-point attribute 
means a conventional accounting start packet. The preseuce of this 
attribute in a accounting start packet means a accounting check- 
point packet. Accounting stop packets do not have this attribute. 

In the preferred embodiment, every accounting packet and the 
corresponding reply must be authenticated using MD5 and a shared secret. The 
I WFs are configured with a shared secret that are used by them for authentication 
during communication with their Radius accounting server. The shared secrets 
used by the IWFs for communicating with accounting servers are stored in the 
home/foreign domain directory located in the MSC The shared secrets for 
accounting security are communicated to the IWFs by their registration servers 
during the end system registration sequence. 

The accounting server software runs in a computer located in the MSC. 
The role of the accounting server in the system is to collect raw accounting data 
from the network elements (the home and the seiving IWFs), process the data and 
store it for transfer to the wireless service provider's billing system. The 
accounting server does not include a billing system. Instead, it includes support 
for an automatic or manual accounting data traasfer mechanism. Using the 
automatic accounting data transfer mechanism, the accounting server transfers 
accounting records in AMA billing format to the customer's billing system over a 
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TCP/IP transport. For this purpose, the system defines AMA billing record 
formats for packet data. Using the manual transfer mechanism, customers are able 
to build a tape to transfer accounting records to their billing system. In order to 
build the tape to their specifications, customers ate provided with information to 
access accounting records so that they may process them before writing them to 
tape. 

In FIG. 22, the raw accounting data received by the accounting server 
from the home or serving IWFs are processed and stored by the accounting server. 
The processing done by the accounting server includes filtering, compression and 
correlation of the law accounting data received from the fWF. A hi<>h availability 
file server using dual active/standby processors and hot swappable RAID disks is 
used for buffering the accounting data while it is transiting through the accounting 
server. 

The accounting server delays processing of the raw accounting data until an 
end system has terminated its mobile IF session. When an end system terminates 
its session, the accounting server processes the raw accounting data that it has 
collected for the session and stores an accounting summary record in a SQL 
database. The accounting summary record stored in the SQL data base points to 
an ASNU encoded file. This file contains detailed accounting information about 
the end system's session. The data stored in the accounting server is then 
transferred by the billing data transfer agent to the customer's billing system. 
Alternatively, the wireless service provider may transfer the accounting data from 
the SQL database and/or the ASN. 1 encoded file to the billing system via a tape. 
The data base scheme and die format of the ASN.l encoded file are documented 
and made available to customers for this purpose. If the volume of processed 
accounting data stored in the accounting system exceeds a high water mark, the 
accounting server generates an NMS alarm. This alarm is cleared when the 
volume of data stored in the accounting server falls below a low water mark. The 
high and low water marks for generating and clearing the alarm are configurable. 
The accounting server also generates an NMS alarm if die age of the stored 
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accounting data exceeds a configurable threshold. Conversely, the alarm is 
cleared, when the age of the accounting data falls below the threshold. 

The subscriber directory is used to store information about subscribers and 
is located in die home network. The home registration server consults this 
directory during the registration phase to authenticate and register an end system. 
For each subscriber, the subscriber directory stores the following information. 

L User Name. This field in the subscriber record will be in SMTP 

format (e.g., u$er@fqdn) where the user sub-field will identify the 
subscriber in his or her wiieless home domain and thzfqdn sub- 
field will identify the wireless home domain of the subscriber. This 
field is sent by the end system in its registration request during the 
registration phase. Hiis field is assigned by the wireless service 
provider to the subscriber at the time of subscription to the network 
service. This field is different than the user name field used in 
PPP. 

2. Mobility Security Association. This field in the subscriber record 
contains the mobility security association between the subscriber 
and his or her home network. As described above, a mobility 
security association exists between each subscriber and its home 
registration server. The mobility security association defines a 
collection of security contexts. Each security context defines an 
authentication algorithm, an authentication mode, a shared secret, 
style of replay protection and the type of encryption (including no 
encryption) to use between the end system and its home server. 
During legistration, the home registration server retrieves 
information about the subscriber's security context from the 
subscriber directory using the User-Name atid the security 
parameter index (SP1) supplied by the end system in its registration 
request. The information in die security context is used for 
enforcing authentication, encryption and replay protection during 
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the session. The mobility security association is created by the 
wireless service provider at the time of subscription. It is up to the 
wireless service provider to permit the subsciiber tu modify this 
association either by calling up a customer service representative or 
by letting subscribers access to a secure Web site. The Web site 
software will export web pages which the wireless service provider 
may make accessible to subscribers from a secure web server. In 
this way, subscribers are able to view/modify the contents of the 
mobility security association in addition to other subscriber 
information that the service provider may make accessible. 

3. Modem MAC Address. This field contains the MAC addiess of die 
modem owned by the subscriber. In addition to the shared secret, 
this field is used during registration lo authenticate the user. It is 
possible to turn off MAC address based authentication on a per user 
basis. The MAC address is communicated to the home legislration 
server during registration. 

4. Enable MAC Address Authentication. This field is used to determine 
if MAC address based authentication is enabled or disabled. If 
enabled, the home registration server checks die MAC address of 
the registering end system against this field to validate the end 
system's identity. If disabled, then no checking is done. 

5. Roaming Enabled Flag, If this field is set to enabled, then the end 
system is allowed to roam to foreign networks. If this field is 
disabled, then the end system is not permitted to roam to foreign 
networks. 

G. Roaming Domain List, This field is meaningful only if the 

Roaming Enabled Flag is set to enabled. This field contains a list 
of foreign domains that the end system is allowed to roam to. 
When the contents of this list is null and the Itoaming Enabled Flag 
is set to enabled, the end system is allowed to roam freely. 
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7. Service Enable/Disable Flag. This field may be set to disabled by 
nV, system administrator to disable service to a subscriber. If this 
field is disabled, then the subscriber is be permitted to register for 
service. If the subscriber is registered and the value of this field is 
set to disabled, then the subscriber's end system is immediately 
disconnected by the network. 

Internet Service Provider Association. This field contains 
information about the subscriber's internet service provider. This 
information is used by the IWF during the PPP registration phase to 
perform authentication with the internet service provider on behalf 
of the end system and also to create a L2TP tunnel between the 
IWF and the internet service provider's PPP server. This field 
contains the identity of the subscriber's ISP. The IWF uses this 
infoimation to access the ISP directory for performing 
authentication and setting up the L2TP tunnel on behalf of the end 
system. 

9. Subscriber's Name <& Address Information. This field contains die 
subscriber's name, address, phone, fax, e-mail address, etc. 

The home domain directory (HDD) is used by the registration server to 
retrieve parameters about the end system to complete registration on behalf of the 
end system. Using this information, the registration server determines if the end 
system is registering at home or if the end system is a roaming end system. In the 
former case, the registration server assumes die role of a home registration server 
and proceed with end system registration. In the latter case, the registration server 
assumes the role of a foreign registration server and, acting as a Radius proxy, it 
forwards the request to the real home registration server whose identity it gets 
from this directory. For roaming end system, the parameters stored in the HDD 
include the IP address of the home registration server, the home-foreign shared 
secret, the home-serving IWF tunnel configuration etc. The HDD is located in the 
MSC. 
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1 . Home Domain Name. This field is used as the key to search the 
HDD for an entry that matches the fully qualified home domain 
name provided by the end system in its registration request. 

2. Proxy Registration Request, This field is used by die registration 
server to determine if it should act as a foreign registration server 
and proxy the end system's registration request to the real home 
registration server. 

3. Home Registration Server DNS Name. If the proxy registration 
request flag is TRUE, this field is used to access the DNS name of 
the real home registration server. Otherwise, this Field is icrnored. 
The DNS name is translated tu an IP address by the foreign 
registration server. The foreign registration server uses the IP 
address to relay the end system's registration request. 

4. Foreign Domain Name. If the proxy registration request flag is 
TRUE, this field is used to identify the foreign domain name to die 
end system's home registration server. Otherwise, this field is 
ignored. The foreign registration server uses this information to 
create the foreign server machine id in SMTP format, for example, 
machine@fqdn. This machine id is sent to the home registration 
server by the foreign registration server in the Radius-Access 
Request. 

5. Shared Secret. If the proxy registration request flag is TRUE, the 
shared secret is used between the foreign and home registration 
servers to authenticate their identity with each other. Otherwise this 
field is ignored. 

6. Tunneling Protocol Parameters, This field is used to store 
parameters to configure the tunnels to provide service to the end 
system. For an end system at home, this includes information on 
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tunnel parameters between the base station and the home IWF and 
from the home IWF to the PPP server. For a roaming end system, 
this includes tunneling parameters from the base station to the 
serving IWF and from the serving IWF to the home IWF. At a 
minimum, for each tunnel, this field contains the type of tunneling 
protocol to use and any tunneling protocol specific parameters. For 
example, this field may contain the identifier for the tunneling 
protocol L2T P and any additional parameters required to configure 
the L2TP tunnel between the IWF and its peer. 

7. Accounting Server Association. This field is used to store 

information needed by the IWF to generate accounting data on 
behalf of the end system. It contains the name of the accounting 
protocol (e.g. RADIUS) , the DNS name of the accounting server 
and additional parameters specific to the accounting protocol like 
the UDP port number, the shared secret that the IWF must use in 
die Radius Accounting protocol, the frequency of check-pointing, 
the seed for creating the session/multi-session id, etc. The 
accounting server's DNS name is translated to the accounting 
server's IP address, which is sent to the IWF. 

For wireless service providers that have roaming agreements with each other, 
the HDD is used for authentication and to complete the registration process. If an 
end system roams from its home network to a foreign network, the foreign 
registration server in that network consults the HDD in its MSC to get information 
about the visiting end system's home registration and to authenticate the home 
network before it provides service to the visiting end system. 

The software for home domain directory management preferably provides a 
graphical user interface (GUI) based HDD management interface for system 
administrators. Using this GUI, system administrators arc able to view and update 
entries in the HDD. This GUI is not intended for use by foreign wireless network 
service providers to perform remote updates based on roaming agreements. It is only 
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intended for use by trusted personnel of the home wireless service provider operating 
behind fire walls. 

The foreign domain directory (FDD) provides functionality that is the reverse 
of the home domain directory. The FDD is used by the home registration server lo 
retrieve parameters about the foreign registration server and the foreign network in 
order to authenticate the foreign network and create a tunnel between a serving IWF 
and a home IWF. These parameters include the home-foreign shared secret, the 
home IWF-serving IWF tunnel configuration, etc. The FDD is preferably located in 
the home registration seiver's MSC. The FDD is used by home registration servers 
for registering roaming end systems. 

The following information will be stored in the FDD. 

1. Foreign Domain Name. This field is used as the key to search the 
FDD for an entry that matches the fully qualified domain name of the 
foreign registration server relaying the registration request. 

2. Shared Secret. This is the shared secret used between the foreign and 
home registration servers to authenticate their identity mutually with 
each other. 

3. Home IWF-Serving IWF Tutmeling Protocol Parameters, This field 
is used to store parameters to configure the tunnel between the home 
IWF and the serving IWF. At a minimum, this field contains the type 
of tunneling protocol to use and any tunneling protocol specific 
parameters. For example, this field may contain the identifier for the 
tunneling protocol L2TP and any additional parameters required to 
configure the L2TP tunnel between the serving IWF and the home 
IWF. 

4. Accounting Server Association. This field is used to store information 
needed by the home IWF to generate accounting data on behalf of the 
end system. It contains the name of the accounting protocol (e.g. 
RADR/S), the DNS name of the accounting server and additional 
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parameters specific to the accounting protocol like the UDP port 
number, the shared secret that the IWF must use in the Radius 
Accounting protocol, the frequency of check-pointing, the seed for 
creating the session/multi-session id, etc. The accounting server's 
DNS name is translated to the accounting server's IP address, which 
is sent to the foreign agent. 

For wireless service providers that have roaming agreements with each other, 
the FDD is used to do authentication and complete the registration process. If an end 
system roams from its home network to a foreign network, the registration server in 
the home network consults the FDD in its MSC to get information and authenticate 
the foreign network providing service to the end system. 

The foreign domain directory management software provides a graphical user 
interface (GUI) based FDD management interface for system administrators. Using 
this GUI, system administrators are able to view and update entries in the FDD. This 
GUI is not intended for use by foreign wireless network service providers to perform 
remote updates based on roaming agreements. It is only intended for use by Ousted 
personnel of the home wireless service provider operating behind firewalls. 

The internet service provider directory (1SPD) is used by the home IWF to 
manage connectivity with ISPs that have service agreements with the wireless service 
provider so that subscribers may access their ISPs usinjg the network. For each 
subscriber, the subscriber directory has an entry for the subscriber's ISP. This field 
points to an entry in the ISPD. The home IWF uses this information to set up the 
connection to the ISP on behalf of the subscriber. 

The network architecture supports roaming. In order for roaming to work 
between wireless service providers, the architecture must support die setting up of 
roaming agreements between wireless service providers. This implies two things: 
(1) updating system directories across wireless service providers and (2) settlement 
of bills between service providers. 
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In order to allow subscribers access to internet service providers, the 
architecture supports roaming agreements with internet service providers. This 
implies that the architecture must be able to send data to and receive data from ISP 
PPP servers (i.e., that support industry standard protocols like PPP, L2TP and 
Radius). It also implies that the architecture handles directory updates for ISP access 
and settlement of bills with ISPs. 

When roaming agreements are established between two wireless service 
providers, both providers have to update their home and foreign domain directories 
in order to support authentication and registration functions for end systems visiting 
their networks from the other network. At a minimum, the architecture of the present 
embodiment supports manual directory updates. When a roaming agreement is 
established between two wireless service providers, then the two parties to the 
agreement exchange information for populating their home and foreign domain 
directories. The actual updates of the directories is done manually by the personnel 
of the respective service providers. If later, the information in the home and foreign 
domain directories needs to be updated, the two parties to the agreement exchange the 
updated information and then manually apply their updates to the directories. 

In an alternative embodiment, the directory management software incorporates 
developing standards in the IETF to enable roaming between internet service 
providers and to enable ISPs to automatically manage and discover roaming 
relationships. This makes manual directory management no longer necessary. The 
network system automatically propagates roaming relationships, and discovers them, 
to authenticate and register visiting end systems. 

At a minimum, the network architecture just processes and stores the 
accounting data and makes the data available to the wireless service provider's billing 
system. It is up to the billing system to handle settlement of bills for roaming. 

In an alternative embodiment, developing standards in the IETF to handle 
distribution of accounting records between internet service providers are incorporated 
into the network architecture to enable ISPs to do billing settlement for roaming end 
systems. 
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The system software supports access to ISPs and private intranets by 
supporting L2TP between the home IWF and the iSPs or intranet PPP server. The 
internet service provider directory contains information useful to die IWF for creating 
these tunnels. As access agreements between the wireless service provider and 
internet service providers are put in place, this directory is updated manually by the 
wireless service provider's personnel. Automatic updates and discovery of access 
relationships between the wireless service provider and internet service providers are 
presently contemplated and implemented as the internet standards evolve. While 
accessing an internet service provider, the subscriber receives two bills - one from the 
wireless service provider for the use of the wireless network and the second from the 
internet service provider. Although common billing that combines bodi types of 
charges is not handled by die minimum embodiment software, it is contemplated that 
die software will take advantage of internet standards for billing setdement as they 
evolve so that subscribers may receive a common bill based on roaming agreements 
between the ISP and wireless service providers. 

The system includes a element management system for managing the network 
elements. From die element manager, system administrators perform configuration, 
performance and fault/alarm management functions. The element management 
applications am on top of a web browser. Using a web browser, system 
administrators manage the network from anywhere that they have TCP/IP access. 
The element manager also pei forms an agent role for a higher level manager. In this 
role it exports an SNMP MIB for alarm and fault monitoring. 

A higher level SNMP manager is notified of alarm conditions via SNMP 
traps. The higher level SNMP manager periodically polls the element managers 
MIB for the health and status of the network. System management personnel at the 
higher level manager are able to view an icon representation of the network and its 
current alarm state. By pointing and clicking on the network element icon, systems 
management personnel execute element management applications using a web 
browser and perform more detailed management functions. 



(161) 



WBBTl 1-2 84666 



Inside the network, management of the physical and logical network elements 
is performed using a combination of the SNMP protocol and internal management 
application programming interfaces. Applications in the clement managei use SNMP 
or other management APIs to perform network management functions. 

Architecturally, the element management system includes of two distinct sets 
of functional dements. The first set of functional elements, including the 
configuration data server, performance data monitor and health/status monitor and 
network element recovery software, executes on an HA server equipped with RAID 
disks. The second set of functional elements, including the management applications, 
executes on a dedicated, non-HA management system. Even if the element manager 
system becomes non-operational, the network elements continue to be able to run and 
report alarms and even be able to recover from fault conditions. However, since ail 
the management applications execute in the non-HA element manager, if the element 
manager goes down, then recovery actions requiring human intervention are not 
possible until the clement manager becomes operational. 

The wireless hubs (WHs) in the base stations are typically owned by a wireless 
service provider (WSP), and they are connected to the WSP's registration server (RS) 
either via point-to-point links, intranets or the Internet The WSP's registration server 
is typically a software module executing on a processor to perform certain registration 
functions. Inter-working function units (IWF units) are typically software modules 
executing on a processor to perform certain interfacing functions. FWF units are 
typically connected to the registration servers via intranets/WAN, and the IWF units are 
typically owned by the WSP. However, the IWF units need not be located within the 
same LAN as the registration servers. Typically, accounting and directory servers (also 
softwaie modules executing on a processor) are connected to the registration servers via 
a LAN in the service provider's Data Center (e.g., a center including one or more 
processors that hosts various servers and other software modules). Traffic from the end 
system is then routed via a router (connected to the LAN) to the public Internet or to 
an ISP's intranet. The registration server located in a foreign WSP's network is 
referred to as the foreign registration server (FRS), and the registiation server located 
in the end system's home network (where the mobile purchases its service) is referred 
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to as the home registration server (HRS). The intcr-working function unit in the home 
network is referred to as the home IWF white the inter-working function unit in the 
foreign network (i.e., the network the end system is visiting) is referred to as the serving 
IWF. 

For fixed wireless service (i.e., a non-moving end system), an end system may 
register for service on the home network from the home network (e.g., at home service) 
or from a foreign network (e.g., roaming service). The end system receives an 
advertisement sent by an agent (e.g., an agent function implemented in software) in the 
wireless hub via the access point. There are both MAC-layer registration as well as 
network-layer registiation to be accomplished. 

For end systems at home (FIG. 23), the network layer registration (like a local 
registration) make's known to the home registration server the wireless hub to which the 
end system is currently attached. An IWF in the end system's home network will 
become the anchor or home IWF. Thus, PPP frames to and from the end system travel 
via the wireless hub to the home IWF in the home network. If the end system is at 
home, the home IW is connected to the wireless hub via an XTunnel protocol. 

For roaming wireless service (FIG. 24), the foreign registration server 
determines the identity of the home network of the roaming end system during the 
registration phase. Using this information, the foreign registration server cormnunicates 
with the home registration server to authenticate and register the end system. The 
foreign registration server then assigns a serving IWF, and an 1-XTunnel protocol 
connection is established between the home IWF and the serving IWF for the roaming 
end system The serving IWF relays frames between the wireless hub and the home 
IWF From the home IWF, data is sent to a PPP server (i.e., point-to-point protocol 
server) which may reside in the same IWF. However, if the data is to go to a corporate 
intranet or an ISP's intranet that has its own PPP server, the data is sent to the separate 
PPP server via the L2TP protocol. The separate server is typically owned and operated 
by an Internet service provider who is different from the wireless service provider. For 
the duration of the session, the locations of the home IWF and PPP server remain fixed. 
The MAC layer registration can be combined with the network registration to 
economize on the overhead of separate communications for MAC layer and network 
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layer registration; however, it may be advantageous to not combine ihese registration 
processes so that the WSP's equipment will be interoperable with other wireless 
networks that supports pure IETF Mobile-IP. 

Registration sets up tluee tables. Table I is associated with each access point, 
and Table 1 identifies each connection (e.g., each end system) by a connection id (CID) 
and associates the connection id with a particular wireless (WM) modem address (i.e., 
the address of the end system or end system). Table 2 is associated with each wireless 
hub (WH), and Table 2 associates each connection id with a corresponding wireless 
modem address, access point and XTunnel id (XID). Table 3 is associated with each 
inter-working function (rWF), and Table 3 associates each connection id with a 
corresponding wireless modem address, wireless hub address, XTunnel id and IP port 
(IP/port). The entries described for these tables are described to include only relevant 
entries that support the discussion of mobility management. In reality, there are other 
important fields that need to be included as well. 
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Table 3: Connection Table at IWF 
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The protocol stacks for dial-up users at home in a network as well as roaming 
users are illustrated in FIGS. 25-28. FIG 25 depicts protocol stacks used for direct 
internet access by a fixed (i.e., non-muving) end system at home where a PPP protocol 
message terminates in the home IWF (typically collocated with the wireless hub) which 
relays message to and from an EP router and from there to the public internet. FIG. 26 
depicts protocol stacks used for remote intranet access (i.e., either private corporate nets 
or an ISP) by a fixed (i.e., non-moving) end system at home where a PPP protocol 
message is relayed through the home IWF (typically collocated with the wireless hub) 
to a PPP server of the private corporate intranet or ISP. FIG. 27 depicts protocol stacks 
used for direct internet access by a roaming but fixed (i.e., non-moving) or a moving end 
system where the PPP protocol terminates in the home IWF (typically located in a 
mobile switching center of the home network) which relays message to and from an IP 
router. In FIG 27, note how message traffic passes through a serving IWF (typically 
collocated with the wireless hub) in addition to the home IWF. FIG. 28 depicts protocol 
stacks used for remote intranet access (i.e., either private corporate nets or an ISP) by 
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a roaming but fixed (Le., non-moving) or a moving end system where a PPP protocol 
message is relayed through the home IWF (typically located in a mobile switching center 
of the home network) to a PPP server of the private corporate intranet or ISP In FIG. 
28, note how message traffic passes through a serving IWF (typically collocated with the 
wireless hub) in addition to the home IWF. When the serving IWF and the wireless hub 
are co-located in the same nest of computers or are even programmed into the same 
computer, it is not necessary to establish a tunnel using the XTunncl protocol between 
the serving IWF and the wireless hub. 

Equivalent variations to these protocol stacks (e.g. the RLP can be terminated 
at the wireless hub rather than at the serving IWF or home IWF for mobiles at home) are 
also envisioned. If the IWF is located far from the wireless hub, and the packets can 
potentially be carried over a lossy IP network between the rWF and wireless hub, then 
it would be preferred to terminate the RLP protocol at the wireless hub. Another 
variation is the Xtunnel between wireless hub and I WF need not be built on top of the 
UDP/TP, Xtunnels can be built using the Frame Relay/ATM link layer. However, the 
use of UDP/IP makes it easier to move the wireless hub and IWF softwaie from one 
network to another. 

Four types of handofF scenarios may occur, and they are labeled: (i) local 
mobility, (ii) micro mobility, (iii) macro mobility, and (iv) global mobility. In all four 
scenarios (in one embodiment of the invention), a route optimization option is not 
considered so that the locations of the home registration server and the ISP's PPP server 
do not change. In another embodiment of the invention with route optimization, the 
ISP's PPP server may cliange. However, this aspect is discussed below. In addition, the 
locations of the foreign registration server and IWF do not change in the first three 
scenarios. 

The proposed IETF Mobile IP standard requires that whenever an end system 
changes the IP subnet to which it is attached, it sends a registration request message to 
a home agent in its home subnet This message carries a caro-of address where the end 
system can be reached in the new subnet. When traffic is sent, for example, from an ISP 
to an end system, the home agent intercepts the traffic that is bound for the end system 
as it that arrives in the home subnet, and then forwards the traffic to the care-of address. 
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The care-of address identifies a particular foreign agent in the foreign subnet. An end 
system's foreign agent can reside in the end system itself, 01 in a separate node that in 
turn forwards traffic to the end system (i.e., proxy registration agent). Mobile IP 
hanUoffs involve exchange of control messages between an end system's agent, the end 
system's home agent and potentially its corresponding hosts (CHs) (with route 
optimization option). 

The proposed IETF Mobile IP standard would Find it difficult meet the latency 
and scalability goals for all movements in a large internetwork. However, the present 
hierarchical mobility management meets such goals. For small movements (e.g. a change 
of Access Points), only MAC-layer re-registrations are needed. For larger movements, 
network-layer re-registrations are performed. The present hierarchical mobility 
management is different from the flat-structure used in the IE fF proposed Mobile-TP 
standard as well as the serving/anchor inter-working function model used in cellular 
systems like CDPD (based on a standard sponsored by the Cellular Digital Packet Data 
forum) 

As depicted in FIG. 29, the local mobility handoff handles end system 
(designated MN for mobile node) movement between APs that belong to the same 
wireless hub. Thus, only MAC layer re-registration is required. The end system receives 
a wireless hub advertisement from a new AP and responds with a registration request 
addressed to the new AP. 

The new AP (i.e., the one that receives the registration request from the end 
system) creates new entries in its connection table and relays the registration message 
to its wireless hub. In local mobility handoffs, the wireless hub does not change. The 
wireless hub recognizes the end system's registration request as a MAC level registration 
request, and it updates its connection table to reflect the connection to the new AP. 
Then, the old AP deletes the connection entry from its connection table. There are at 
least three ways whereby the old AP can delete the old entries, namely (i) upon time out, 
(ii) upon receiving a copy of the relayed MAC layer association message from the new 
AP to the wireless hub (if this relay message is a broadcast message), and (iti) upon 
being informed by the wireless hub of the need to delete the entry. 
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As depicted in FIG. 30, the micro mobility handoff handles end system 
(designated MN for mobile node) movement between wireless hubs that belong to the 
same registration server and where the end system can still be served by the existing 
serving IWF. When an advertisement is received from a new wireless hub (through a 
new AP), the end system sends a message to request registration to the registration 
server. The registration request is relayed from the new AP to the new wireless hub to 
the registration server. 

When the registration server determines that the existing IWF can still be used, 
the registration server sends a build X funnel Request message to request the existing 
IWF to build an XTunnel to the new wireless hub. Later, the registration server sends 
a teai down XTunnel request message to request the existing IWF to tear down the 
existing XTunnel with the old wireless hub. The build and tear XTunnel Request 
messages can be combined into one message. A foreign legislation server does not 
forward the registration message to the home registration server since there is no change 
of IWF, either the serving IWF or home IWF. 

Upon receiving a positive build XT\innel reply and a positive tear XTunnel reply 
from IWF, the registration server sends a registration reply to end system. As the 
registration reply reaches the new wireless hub, the connection table at the new wireless 
hub is updated to reflect the connection to the new AP. The new AP updates its MAC 
filter address table and connection table after receiving a message from the new wireless 
hub, and the registration reply is forwarded to the end system. 

The registration server sends a release message to the old wireless hub. When 
the old wireless hub receives the release message, it updates its connection table and the 
MAC filter address table and connection table of the old AP. 

As depicted in FIG. 31, the macro mobility handoff case handles movement 
between wireless hubs that involves a change of the serving IWF in the foreign network, 
but it does not involve a change in the registration server When an advertisement is 
received from a new wireless hub (through a new AP), the end system sends a message 
to request a network layer registration to the registration server. The registration 
request is relayed from the new AP to the new wireless hub to the registration server. 
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The registration server recognizes that it is a foreign registration server when the 
end system does not belong to the present registration server's network. This foreign 
registration server determines the identity of the home registration server by using a 
request, preferably a Radius Access request (RA request), to the foreign directory server 
(like a big yellow pages) and then assigns an appropriate IWF to be the serving IWF, and 
it forwards a registration request to the home registration server, preferably through a 
Radius Access request (RA request), irtforrning the home registration server of the newly 
selected IWF. 

The home registration server authenticates the registration request by using a 
request, preferably a Radius Access request (RA request), to the home directory server. 
Upon authenticating the request and determining that the existing home IWF can still 
be used, the home registration server instructs the home IWF to build a new 1-XTunnel 
to the newly assigned serving IWF and to tear down the existing I-XTunnel to the old 
serving IWF. Upon receiving a positive build I-XTunnel reply and a positive tear I- 
XTunnel reply from the home IWF, the home registration server sends a registration 
reply to the foreign registration sei ver. 

The foreign registration server then instructs the newly assigned IWF to build an 
XTunnel to the new wireless hub. Upon receiving a positive build XTunnel reply, the 
foreign registration server instructs the old IWF to tear down the XTunnel to die old 
wireless hub. Upon receiving a positive build XTunnel reply and a positive tear XTunnel 
reply, the foreign registration server sends a registration reply to end system. 

As the registiation reply reaches the new wireless hub, the connection table at 
the new wireless hub is updated to leflect the connection to the new AP. The new AP 
updates its MAC filter address table and connection table after receiving a message from 
the new wireless hub, and the registration reply is forwarded to the end system. 

The registration server sends a release message to the old wireless hub. When 
the old wireless hub receives the release message, it updates its connection table and the 
MAC filter address table, and the old AV updates its MAC filter address table and 
connection table after receiving a message from the old wireless hub. 
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The global mobility handoff case handles movement between wireless hubs that 
involves a change of registration servers. FIG. 32 depicts a global mobility handoiT 
where the home r\VF docs not change, and FIG. 33 depicts a global mobility handoff 
where the home TWF changes. When an advertisement is received from a new wireless 
hub (through a new AP) in a new foreign network, the end system sends a message to 
request a network layer registration to the new foreign registration server. The 
registration request is relayed from the new AP to the new wireless hub to the new 
foreign registration server. 

The registration server recognkes that it is a new foreign registration server 
when the end system does not belong to the present registration server's network. This 
foreign registration server determines the identity of the home registration server by 
using a request, preferably a Radius Access request (RA request), to the foreign 
directory server (like a big yellow pages) and then assigns an appropriate IWF to be the 
serving IWF, and it forwards the registration request to the home registration server, 
preferably through a Radius Access request (RA request), informing the home 
registration server of the newly selected IWF. 

The home registration server authenticates the registration request by using a 
request, preferably a Radius Access request (RA request), to the home directory server. 

Upon authenticating the request and determining that the existing hume IWF can still 
be used (FIG. 32), the home registration server instructs the home IWF to build a new 
I-XT unnel to the serving IWF newly assigned by the new foreign registration server. 

The home registration server also sends a de-registration message to the old foreign 
registration server and instructs the home WF to tear down the existing I-XTunnel to 
the existing serving IWF of the old foreign network. Upon receiving a positive build I- 
XTunnel reply and a positive tear I-XTunnel reply from the home IWF, the home 
registration server sends a legistration reply to the new foreign registration server. 

The new foreign registration server then instructs the newly assigned IWF to 
build an XTunnel to the new wireless hub. Upon receiving u positive build XTunncl 
reply, the foreign registration server sends a registration reply to end system. As the 
registration reply reaches the new wireless hub, the connection table at the new wireless 
hub is updated to reflect the connection to the new AP. The new AP updates its MAC 
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filter address table and connection table after receiving a message from the new wireless 
hub, and the registration reply is forwarded to the end system. 

The old foreign registration server instructs the old rWF to tear down the 
XTunnel to the old wireless hub. Upon receiving a positive tear XTunnel reply or 
contemporaneously with the tear down XTunnel request, the old foreign registration 
server sends a release message to the old wireless hub. When the old wireless hub 
receives the release message, it updates its connection table and the MAC filter address 
table, and the old AP updates its MAC filter address tabic and connection table after 
receiving a message from the old wireless hub. 

AJternatively, after the home registration server authenticates the registration 
request from the new foreign registration server and determines that the existing home 
IWF cannot be used (FIG. 33), the home registration server chooses a new home iWF 
and instructs the new home IWF to build a new level 2 tunnel protocol tunnel (L2TP 
tunnel) to the present PPP server (e.g., the PPP server in a connected ISP intranet). 
Then, the home registration server instructs the old home iWF to transfer its L2TP 
tunnel traffic to the new home IWF. 

Then the home registration server instructs the new home IWF to build a new 
I-XTunnel to the serving IWF newly assigned by the new foreign registration server. 
The home registration server also sends a de-registration message to the old foreign 
registration server and instructs the home IWF to tear down the existing I-XTunnel to 
the existing serving IWF of the old foreign network. Upon receiving a positive build I- 
XTunnel reply and a positive tear I=XTunnel reply from the home IWF, the home 
registration server sends a registration reply to the new foreign registration server. 

The new foreign registration server then instructs the newly assigned IWF to 
build an XTunnel to the new wireless hub. Upon leceiviug a positive build XTunnel 
reply, the foreign registration server sends a registration reply to end system. As the 
re^'stration reply reaches the new wireless hub, the connection table at the new wireless 
hub is updated to reflect the connection to the new AP. The new AP updates its MAC 
filter address table and connection table after receiving a message from the new wireless 
hub, and the registration reply is forwarded to the end system. 
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The old foreign registration server instructs the old IWF to tear down the 
XTunnel to the old wireless hub. Upon receiving a positive tear XTunnel reply or 
contemporaneously with the tear down XTunnel request, the old foreign registration 
server sends a release message to the old wireless huh. When the old wireless hub 
leceives the release message, it updates its connection table and the MAC filter address 
tabic, and the old AP updates its MAC filter address table and connection table after 
receiving a message from the old wireless hub. 

End systems constructed according to the present invention interoperate with 
networks constructed according to the proposed EETF Mobile-TP standards, and end 
systems constructed according to the proposed IETF Mobile- IP standards interoperate 
with networks constructed according to the present invention. 

The main differences between the present invention and the IETF Mobile-IP 
(rtc2002, a standards document) are: 

(i) The present invention uses a hierarchical concept for mobility 
management rather than a flat structure as in the proposed IETF 
Mobile-IP standard. Small mobility within a small area does not result 
in a network level registration. Micro mobility involves setting up of a 
new Xtunnel and tearing down of an existing Xturuiel. Global mobility, 
at the minimum, involves setting up of a new I-XTunnel and tearing 
down of an existing I-Xiunnel apart from the setting up/tearing down of 
XTunnel. Global mobility sometimes also involves setting up a new 
L2TP Tunnel and transferring of L2TP state from the existing L2TP 
Tunnel to the new L2TP Tunnel. 

00 In the present invention, a user name plus a realm is used to identify a 
remote dial-up user rather than a fixed home address as in the case of the 
proposed IETF Mobile-IP standard. 

(iii) In the present invention, registration and routing functions are carried out 
by separate entities. The two functions are carried out by the home agent 
in the proposed IETF Mobile IP standard, and both functions are carried 
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out by the foreign agent in the proposed EFT Mobile CP standard. In 
contrast, in an embodiment of the present invention, registration is 
carried out in the registration server and routing functions are carried out 
by both the home and foreign IWF and the wireless hub (also referred to 
as the access hub). 

(iv) The present invention utilizes three tunnels per PPP session. The 
XTunnel is more of a link-layer tunnel between the wireless hub and the 
serving IWF. The (-XTunnel between the serving IWF and the home 
IWF is more like the tunnel between home and foreign agents in the 
proposed IETF Mobile-IP standard. The L2TP tunnel is used only when 
home IWF is not a PPP server, 

(v) In the present invention, network layer registration occurs before PPP 
session starts while in the proposed IETF Mobile-IP standard, Mobilc-IP 
registration occurs after PPP session enters into the open state. 

(vi) In the present invention, the network entity that advertises the agent 
advertisement (i.e., the wireless hub) is not on a direct link to the end 
systems whereas for the proposed IETF Mobile-IP standard, the agent 
advertisement must have a TTL of 1 which means that the end systems 
have a direct link with the foreign agent. In addition, the agent 
advertisement in the present invention is not an extension to the TCMP 
router advertisements as in the proposed IETF Mobile-TP standard. 

End systems in the present invention, should support agent solicitation. When 
an end system in the present invention visits a network which is supporting the proposed 
IETF Mobile-IP standard, it waits until it hears an agent advertisement. If it does not 
receive an agent advertisement within a reasonable time frame, it broadcasts an agent 
solicitation 

In the present invention, network operators may negotiate with other networks 
that support the proposed IETF Mobile-TP standard such that home addresses can be 
assigned to the end systems of the present invention that wish to use other networks. 
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When the end system of the present invention receives the agent advertisement, it can 
determine that the network it is visiting is not an a network according to the present 
invention and hence uses the assigned home address to register. 

For networks supporting the proposed IETF Mobiie-IP standard, the PPP 
session starts before Mobile-IP .registration, and the PPP server is assumed to be 
collocated with the foreign agent in such networks. In one embodiment, an SNAP 
header is used to encapsulate PPP frames in the MAC frames of the present invention 
(in a manner similar to Ethernet fonnat), and the foreign agent interprets this format as 
a proprietary PPP format over Ethernet encapsulation. Thus, the end system of the 
present invention and its PPP peer can enter into an open state before the foreign agent 
starts transmitting an agent advertisement, and the end system of the present invention 
can register. 

To allow end systems supporting the proposed IETF Mobile-IP standard to 
work in networks of the type of the present invention, such mobiles are at least capable 
of performing similar MAC layer registrations. By making the agent advertisement 
message format similar to the proposed Mobile-IP standard agent advertisement 
message format, a visiting end system can interpret the agent advertisement and register 
with a wireless hub. In the present invention, registration request and reply messages 
arc similar to the proposed IETF Mobile-IP standard registration request and reply 
messages (without any unnecessary extensions) so that the rest of the mobility 
management features of the present invention are transparent to the visiting end systems. 

Since end systems supporting the proposed LET F Mobile-IP standard expect a 
PPP session to start before Mobile-IP registration, an optional feature in wireless hubs 
of the present invention starts to interpret PPP LCP, NCP packets after MAC-layer 
registrations. 

To avoid losing traffic during handoffs, the mobility management of the present 
invention uses the make before break concept For local mobility, a make before break 
connection is achieved by turning the MAC-layer registration message relayed by the 
new AP to the wireless hub into a broadcast message. That way, the old AP can hear 
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about the new registration and forward packets destined for the end system that have not 
been transmitted to the new AP. 

For micro mobility, information about the new wireless hub is included in the 
Tear XTunnel message exchanged between the serving iWF and the old WH. That way, 
the old wireless hub can forward buffered packets to the new wireless hub upon hearing 
a TearXTunnel message from the serving IWF. Alternatively, the RLP layer at the IWT 
knows the sequence number that has been acknowledged by the old wireless hub so far. 

At the same time, the IWF knows the current send sequence number of the latest 
packet sent to the old wireless hub. Therefore, the IWF can forward those packets that 
are ordered in between these two numbers to the new wireless hub before sending newer 
packets to the new wireless hub. The RLP layer is assumed to be able to filter duplicate 
packet. The second approach is probably preferable to the first approach for the old 
wireless hub may not be able to communicate with one another directly. 

For macro mobility, the old serving rWF can forward packets to the new serving 
IWF, in addition to the packet foiwardmg done from the old wireless hub to the new 
wireless. All we need to do is to forward the new serving WF identity to the new 
serving IWF in the tear down I-XTunnel message. Another way to achieve the same 
result is to let the home IWF forward ihe missing packets to the new serving IWF rather 
than asking the old serving IWF to do the job since the home IWF knows the I-XTunnel 
sequence number last acknowledged by the old serving IWF and the current I-X Tunnel 
sequence number sent by the home IWF. 

The method of estimating how much buffer should be allocated per mobile per 
AP per wireless hub per IWF such that the traffic loss between handoffs can be 
minimized is to let the end system for the AP for the wireless hub for the IWF estimate 
the packet arrival rate and the handoff time. This information is passed to the old AP 
of the wireless hub of the IWF to determine how much traflic should be transferred to 
the new AP of the wireless hub of the IWF, respectively, upon handoffs. 
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To achieve route optimization in the present invention, the end system chooses 
the PPP server closest to the serving r\VF. Without route optimization, excessive 
transport delays and physical line usage may be experienced. 

For example,, an end system subscribed to a home network in New York City 
may roam to Hong Kong. To establish a link to a Hong Kong ISP, the end system 
would have a serving TWF established in a wireless hub in Hong Kong and a home IWF 
established in the home network in New York City. A message would then be routed 
from the end system (roamed to Hong Kong) tiirough the serving IWF (in Hong Kong) 
and through the home IWF (in New York City) and back to the Hong Kong ISP. 

A preferred approach is to connect from the serving IWF (in Hong Kong) 
directly to the Hong Kong ISP. The serving IWF acts like the home IWF. In this 
embodiment, roaming agreements exist between the home and foreign wireless 
providers. In addition, the various accounting/billing systems communicate with one 
another automatically such that billing information is shared. Accounting and billing 
information exchange may be implemented using standards such as the standard 
proposed by the ROAMOPS working group of the IETF. 

However, the serving IWF must still discover the closest PPP server (e.g., the 
Hong Kong ISP) In the present embodiment, the foreign registration server learns of 
the end system's desire to connect to a PPP seiver (e.g., a Hong Kong ISP) when it 
receives a registration request from the end system. When the foreign registration server 
determines that the serving IWF is closer to the desired PPP server (e.g., the Hong Kong 
ISP) than the home IWF is, the foreign registration server instructs the serving IWF to 
establish an L2TP tunnel to its nearest PPP server (in contrast to the PPP server closest 
to the home registration server and home IWF) Then, the foreign registration server 
informs the home registration server that the end system is being served by the serving 
IWF and the foreign PPP. 

In an alternative embodiment, the foreign registration server determines that the 
serving IWF is closer to the desired PPP server (e.g., the Hong Kong ISP) than the 
home EWF is, when it receives a registration request from the end system. The foreign 
registration server relays the registration request message to" the home registration server 
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with an attached message indicating the serving IWF information and a notification that 
route optimization is preferred. At the same time, the foreign registration server 
instincts the serving IWF to establish an L2TP tunnel to the PPP seiver. Upon 
approving the registration request, the home registration seiver instructs the home IWF 
to trausfer the L2TP state to the foreign IWF. 

In FIG. 34, data frames are initially communicated between the fust mobile end 
system and the first access hub through the first access point. Then, a registration 
request is sent from the first mobile end system through the second access point to die 
first access hub to re-register the first mobile end system with the first access hub 
without informing the first registration server when the first mobile end system moves 
and re-registers tlirough the second access point. Finally, the second access point is 
linked with the first access hub when the first mobile end system re-rcgisters through the 
second access point, and the first access point is de-linked from the first access hub when 
the second access point is linked with the first access hub. 

In FIG. 3 5, data frames are initially communicated between the first mobile end 
system and the first inter-working function through the first access hub. Then, a 
registration request is sent from the first mobile end system through a first access point 
and through the second access hub to the first registration server to re-register the first 
mobile end system with the first registration server without informing the home 
registration server when the first mobile end system moves and re-registers through the 
second access hub. Finally, the second access hub is linked with the first inter-working 
function when the first mobile end system re-registers through the second access hub, 
and the first access hub is de-linked from the first inter-working function after the second 
access hub is finked with the first inter- working function. 

In FIG. 36, data frames are initially communicated between the first mobile end 
system and the thud inter- working function dirough the first inter working function, and 
data frames are initially communicated between the third inter-working function and the 
first communications server. Then, a registration request is sent from the first mobile 
end system through a first access point and through the first access hub and through the 
first registration server to the home registration seiver to re-register the first mobile end 
system with the home registration server without de-linking the third inter-working 
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fuaction from the first communications server when the first mobile end system moves 
and re-registers through the first access hub. The step of sending the registration request 
from the first registration server to the home registration server sends an indication of 
a change from the first inter- working function to the second inter- working function. 
Finally, the second inter-workinp, function is linked with the third inter-working function 
when the first mobile end system re-rcgistei s through the first access hub, and the first 
inter-working function is de-iinked from the third inter-working function alter the 
second inter-working function is linked with the third inter-working function. 

In FIG. 37, data frames are initially communicated between a first mobile end 
system and the third inter- working function tlirough the first inter-working fiinction, and 
data frames arc initially communicated between the third inter-woiking function and the 
First communications server. Then, a registration request is sent from the first mobile 
end system dirough a first access point and through the first access hub and through the 
second registration server to the home registration sei ver to re-register the first mobile 
end system with the home registration sei ver without de-linking the third inter- working 
function from the first communications server when the first mobile end system moves 
and re-registers through the first access hub. Finally, the third inter-working function 
is linked with the second inter-working function when the first mobile end system re- 
registers through the first access hub, and the third intcr-working function is de-linked 
from the first inter- working function after the third inter-working function is linked with 
the second inter-working function. 

In FIG. 38, data frames are initially communicated between a first mobile end 
system and the third inter-working function through the first inter-working function, and 
data frames are nitialry communicated between the third inter-working function and the 
first communications server. Then, a registration request ia sent from the first mobile 
end system through a first access point and through the first access hub and through the 
second registration servei to the home registration server to reregister the first mobile 
end system with the home registration server when the first mobile end system moves 
and re-registers through the first access hub. Finally, the fourth inter-working function 
is linked with the second inter-working function when the first mobile end system re- 
registers through the first access hub, the fourth inter- working function is linked with the 
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first communications server, the third inter-working function is de-linked from the first 
communications server when the fourth inter-working function is linked with the first 
communications server, and the third inter-working function is de-linked from the first 
inter- woi king function after the fourth inter-working function is linked with the second 
inter-working function. 

The wireless data network include a home mobility switching center, a foreign 
mobility switcliing center, a base station and an end user. The home mobility switching 
center includes a home registration server and a home inter-working function. The 
foreign mobility switching center includes a serving registration server and a serving 
inter-working function. The base station includes a proxy registration agent. The end 
user modem includes a user registration agent. The user registration agent is coupled 
to the proxy registration agent, the pruxy registration agent is coupled to the serving 
registration server, and the serving registration server is coupled to the home registration 
server. The proxy registration agent includes a module to send an advertisement 
containing a care-of-address when the proxy registration agent receives a solicitation 
from the user registration agent, and the user registration agent includes a module to 
incorporate user identity information and the care-of-address in a registration request 
when the user registration agent receives the advertizement and a module to send this 
registration request to the proxy registration agent. The proxy registration agent 
includes a module to forward to the serving registration server any registration request 
received from any user. The serving registration server includes a foreign directory 
module to determine a home registration server address, a module to encapsulate the 
registration request and incorporate serving registration server identity information and 
the encapsulated registration request in a radius access request when the home 
registration server address is determined, and a module to send the radius access request 
to the home registration server. The home registration server includes a home directory 
module to authenticate the serving registration server identity information, a module to 
form an inter-working function request from the radius access request when the serving 
registration server identity information is authenticated, and a module to send the inter- 
working request to the home inter-working function. 
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Having described preferred embodiments of a novel network architecture with 
wireless end users able to roam (which are intended to be illustrative and not 
limiting), it is noted that modifications and variations caii be made by persons skilled 
in the art in light of the above teachings. For example, connection links described 
herein may make reference to known connection protocols (e.g., IP, TCP/IP, L2TP, 
IEEE 802.3. etc.); however, the invention contemplates other connection protocols 
in the connections links that provide the same or similar data delivery capabilities. 
Acting agents in the above described embodiments may be in the form of software 
controlled processors or may be other form of controls (e.g., programmable logic 
arrays, etc.). Acting agents may be grouped as described above or grouped otherwise 
in keeping with the connection teachings described herein and subject to security and 
authentication teachings as described herein. Furthermore, a single access point, 
access hub (i.e. , wireless hub) or inter-working function unit (IWF unit) may provide 
multi-channel capability. Thus, a single access point or access hub or IWF unit may 
act on traffic from multiple end systems, and what is described herein as separate 
access points, access hubs or IWF units contemplates equivalence with a single multi- 
channel access point, access hub or IWF unit. It is therefore to be understood that 
changes may be made in the. particular embodiments of the invention disclosed which 
are within the scope and spirit of the invention as defined by the appended claims. 

Having thus described the invention with the details and particularity required 
by the patent laws, what is claimed and desired protected by Letters Patent is set forth 
in the appended claims. 
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4. Brief Description Of Drawings 

The invention will be described in detail in the following description of 
preferred embodiments with reference to the following figures wherein: 

FIG. 1 is a configuration diagram of a known remote access architecture 
through a public switched telephone network; 

FIG. 2 is a configuration diagram of a remote access architecture through a 
wireless packet switched data network according to the present invention; 

FIG. 3 is a configuration diagram of selected parts of the architecture of the 
network of FIG. 2 showing a roaming scenario; 

FIG, 4 is a configuration diagram of a base station with local access points; 

FIG. 5 is a configuration diagram of a base station with remote access paints; 

FIG. 6 is a configuration diagram of a base station with remote, access points, 
some of which are connected using a wireless trunk connection; 

FIG. 7 is a diagram of a protocol stack for a local access point; 

FIG. 8 is a diagram of a protocol stack for a remote access point with a 
wireless trunk; 

FIG. 9 is a diagram of a protocol stack for a relay function in the base station 
for supporting remote access points with wireless trunks; 

FIG. 10 is a diagram of protocol stacks for implementing the relay function 
depicted in FIG. 9; 
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FIG. 1 1 is a diagram of protocol stacks for a relay function in the base station 
for supporting local access points; 

FIG. 12 is a configuration diagram of selected parts of the architecture of the 
network of FIG. 2 showing a first end system registering in the home network from 
the home network and a second system registering in the home network from a 
foreign network using a home inter-working function for an anchor; 

FIG. 13 is a configuration diagram of selected parts of the architecture of the 
network of FIG. 2 showing a first end system registering in the home network from 
the home network and a second system registering in the home network from a 
foreign network using a serving inter-working function for an anchor; 

FIG. 14 is a ladder diagram of the request and response messages to register 
in a home network from a foreign network and to establish, authenticate and 
configure a data link; 

FIG. 15 is a configuration diagram of selected parts of the architecture of the 
network of FIG. 2 showing registration requests and responses for registering a 
mobile in a home network from the home network; 

FIG. 16 is a configuration diagram of selected parts of the architecture of the 
network of FIG. 2 showing registration requests and responses for registering a 
mobile in a home network from a foreign network; 

FIG. 17 is a configuration diagram of protocol stacks showing 
communications between au end system in a home network and an inter-working 
function hi the home network where the cell site has local access points; 

FIG. 18 is a configuration diagram of protocol stacks showing 
communications between an end system in a home network and an inter-working 
function in the home network where the cell site has remote access points coupled to 
a wireless hub through a wireless trunk; 
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FIG. 19 is a configuration diagram of protocol stacks showing 
communications between a base station coupled to a roaming end system and a home 
inter-working function; 

FIG. 20 is a configuration diagram of protocol stacks showing 
communications between an end system in a home network through an inter-working 
function in the home network to an internet service provider; 

FIG. 21 is a configuration diagram of protocol stacks showing 
communications between an end system in a foreign network and a home registration 
server in a home network during die registration phase; 

FIG. 22 is a processing flow diagram showing the processing of accounting 
data through to the customer billing system; 

FIGS. 23 and 24 are (adder diagrams depicting the regis cation process for an 
end system in a home network and in a foreign network, respectively; 

FIGS. 25 and 26 are protocol stack diagrams depicting an end system 
connection in a home network where a PPP protocol terminates in an inter-working 
function of the home network and where the PPP protocol terminates in an ISP or 
intranet, respectively; 

FIGS. 27 and 28 are protocol stack diagrams depicting an end system 
connection in a foreign network where a PPP protocol terminates in an inter-working 
function of the foreign network and where the PPP protocol terminates in an ISP or 
intranet, respectively; 

FIGS. 29, 30 and 31 are ladder diagrams depicting a local handoff scenario, 
a micro handoff scenario and a macro handoff scenario, respectively; 

FIG. 32 is a ladder diagram depicting a global handoff scenario where the 
foreign registration server changes and where home inter-working function does not 
change; 
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FIG. 33 is a ladder diagram depicting a global handoff scenario where both 
the foreign registration server and the home inter-working function change; 

FIGS. 34, 35 and 36 are functional flow charts depicting local, micro and 
macro handoff procedures according to the present invention; 

FIG. 37 is a functional flow chart depicting global handoff procedures 
according to the present invention when the inter-working function in the home 
network docs not change; and 

FIG. 38 is a functional flow chart depicting global handoff procedures 
according to the present invention when the inter-working function in the home 
network does change. 
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1 - Abstract 

A wireless data network includes a wiieiess packet switched data network for 
end users that divides mobility management into local, micro, macro and global 
connection handover categories and minimizes handoff updates according to the 
handover category. The network integrates MAC handoff messages with network 
handoff messages. The network separately directs registration functions to a 
registration server and direct routing functions to inter-working function units. The 
network provides an intermediate XTunnel channel between a wireless hub (also 
called access hub AH) and an inter-working function unit (IWF unit) in a foreign 
network, and it provides an IXTunnel channel between an inter-working function unit 
in a foreign network and an inter-working function unit in a home network. The 
network enhances the layer two tunneling protocol (L2TP) to support a mobile end 
system, and it performs network layer registration before the start of a PPP 
communication session. 



2- Representative Drawing 

FIG. 2 



